Known vulnerabilities in EMC Data Protection Advisor - page 6

Vendor: Dell
Software: EMC Data Protection Advisor
Software CPE: cpe:2.3:a:dell:emc_data_protection_advisor:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 123
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EMC Data Protection Advisor EMC Data Protection Advisor is affected by 123 known vulnerabilities: 2 critical, 18 high, 47 medium, 56 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-33935		 CWE-79 Low
No
No
 19.7 B4 26.07.2022 SB2022072620
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 19.4 B104, 19.5 B74, 19.6 B24 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 19.4 B104, 19.5 B74, 19.6 B24 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU57485 - Improper input validation
CVE-2021-35560		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101940
SB2022020177
SB2022021424
and 28 more
#VU57486 - Improper input validation
CVE-2021-35567		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 54 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57488 - Improper input validation
CVE-2021-3522		 CWE-20 Low
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101940
SB2022041131
SB2022041132
and 12 more
#VU57489 - Improper input validation
CVE-2021-35586		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 82 more
#VU57491 - Improper input validation
CVE-2021-35556		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 76 more
#VU57492 - Improper input validation
CVE-2021-35559		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 80 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU57494 - Improper input validation
CVE-2021-35565		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 78 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 19.4 B108, 19.5 B83, 19.6 B33 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU54224 - Out-of-bounds write
CVE-2021-3517		 CWE-787 High
No
No
 19.4 B108, 19.5 B83, 19.6 B33 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 42 more
#VU34174 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-5352		 CWE-78 High
No
No
 - 06.07.2020 SB2020070613
#VU34726 - Missing Authorization
CVE-2019-18581		 CWE-862 Medium
No
No
 - 18.03.2020 SB2020031833
#VU34727 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-18582		 CWE-94 Medium
No
No
 - 18.03.2020 SB2020031833
#VU14192 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-11048		 CWE-611 Low
No
No
 6.4 patch B180, 6.5 patch B58 03.08.2018 SB2018080603
#VU11146 - Use of Hard-coded Password
CVE-2018-1206		 CWE-259 Low
No
No
 - 19.03.2018 SB2018030714
#VU8491 - Use of Hard-coded Password
CVE-2017-8013		 CWE-259 Low
No
No
 - 16.09.2017 SB2017091902


Showing elements 101 - 120 out of 123