Known vulnerabilities in EMC Data Domain

Vendor: Dell
Software: EMC Data Domain
Software CPE: cpe:2.3:a:dell:emc_data_domain:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 18
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EMC Data Domain EMC Data Domain is affected by 18 known vulnerabilities: 1 critical, 2 high, 4 medium, 11 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66218 - Improper Authentication
CVE-2021-21544		 CWE-287 Low
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043026
SB2022102060
#VU66217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21543		 CWE-79 Medium
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043026
SB2022102060
#VU66216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21542		 CWE-79 Medium
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043025
SB2022102060
#VU66214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21541		 CWE-79 Medium
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043024
SB2022102060
#VU66213 - Stack-based buffer overflow
CVE-2021-21540		 CWE-121 Medium
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043024
SB2022102060
#VU66212 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21539		 CWE-367 Low
No
No
 6.2.1.60, 7.2.0.70, 7.6.0.7 09.08.2022 SB2021043024
SB2022102060
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 7.7.1.0, 7.8.0.0 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU45801 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5366		 CWE-22 Low
No
No
 6.2.1.40, 7.1.0.30, 7.2.0.20, 7.2.0.50, 7.4 20.08.2020 SB2020082009
SB2022080311
SB2020070954
and 3 more
#VU28947 - Improper Initialization
CVE-2020-0529		 CWE-665 Low
No
No
 6.2.1.40, 7.1.0.30, 7.2.0.20, 7.2.0.50, 7.4 10.06.2020 SB2020061037
SB2022102516
#VU28945 - Memory corruption
CVE-2020-0528		 CWE-119 Low
No
No
 6.2.1.40, 7.1.0.30, 7.2.0.20, 7.2.0.50, 7.4 10.06.2020 SB2020061037
SB2022102516
#VU26517 - Stack-based buffer overflow
CVE-2020-5344		 CWE-121 High
No
No
 6.1.2.70, 6.2.1.0, 7.0.0.20, 7.1.0.10, 7.1.0.20, 7.2.0.5 01.04.2020 SB2020040154
SB2022080311
SB2022102631
and 1 more
#VU23451 - Cryptographic Issues
CVE-2019-1551		 CWE-310 Low
No
No
 6.1.2.70, 6.2.1.0, 7.0.0.20 08.12.2019 SB2019120802
SB2019122101
SB2019122807
and 24 more
#VU21045 - Cryptographic Issues
CVE-2019-1563		 CWE-310 Low
No
No
 6.1.2.70, 6.2.1.0, 7.0.0.20 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 27 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 6.1.2.70, 6.2.1.0, 7.0.0.20 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU19563 - Incorrect Default Permissions
CVE-2019-1552		 CWE-276 Low
No
No
 6.1.2.70, 6.2.1.0, 7.0.0.20 30.07.2019 SB2019073002
SB2019123106
SB2022102812
and 4 more
#VU15957 - Permissions, Privileges, and Access Controls
CVE-2018-3180		 CWE-264 Low
No
No
 6.0.2.40, 6.1.2.30, 6.2.0.10 19.11.2018 SB2018111910
SB2018101611
SB2018101612
and 27 more
#VU12106 - Permissions, Privileges, and Access Controls
CVE-2017-4983		 CWE-264 Low
No
No
 - 23.04.2018 SB2017050408
#VU9710 - Memory corruption
CVE-2017-14385		 CWE-119 High
No
No
 - 19.12.2017 SB2017122001