Known vulnerabilities in EMC Data Protection Advisor - page 6

Vendor: Dell
Software: EMC Data Protection Advisor
Software CPE: cpe:2.3:a:dell:emc_data_protection_advisor:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 115
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EMC Data Protection Advisor EMC Data Protection Advisor is affected by 115 known vulnerabilities: 2 critical, 18 high, 45 medium, 50 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-33935		 CWE-79 Low
No
No
 19.7 B4 26.07.2022 SB2022072620
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 19.4 B104, 19.5 B74, 19.6 B24 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 19.4 B104, 19.5 B74, 19.6 B24 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU57485 - Improper input validation
CVE-2021-35560		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101940
SB2022020177
SB2022021424
and 28 more
#VU57488 - Improper input validation
CVE-2021-3522		 CWE-20 Low
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101940
SB2022041131
SB2022041132
and 12 more
#VU54224 - Out-of-bounds write
CVE-2021-3517		 CWE-787 High
No
No
 19.4 B108, 19.5 B83, 19.6 B33 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 42 more
#VU34174 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-5352		 CWE-78 High
No
No
 - 06.07.2020 -
#VU34726 - Missing Authorization
CVE-2019-18581		 CWE-862 Medium
No
No
 - 18.03.2020 -
#VU34727 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-18582		 CWE-94 Medium
No
No
 - 18.03.2020 -
#VU14192 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-11048		 CWE-611 Low
No
No
 6.4 patch B180, 6.5 patch B58 03.08.2018 SB2018080603
#VU11146 - Use of Hard-coded Password
CVE-2018-1206		 CWE-259 Low
No
No
 - 19.03.2018 -
#VU8491 - Use of Hard-coded Password
CVE-2017-8013		 CWE-259 Low
No
No
 - 16.09.2017 -
#VU7388 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-8003		 CWE-22 Low
No
No
 - 10.07.2017 -
#VU7387 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-8002		 CWE-89 Low
No
No
 - 10.07.2017 -
#VU39746 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-8211		 CWE-22 Medium
No
No
 - 03.02.2017 -


Showing elements 101 - 120 out of 115