Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

data protection advisor vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-1742
EMC Data Protection Advisor prior to 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
Emc Data Protection Advisor 5.6.1Emc Data Protection Advisor 5.8Emc Data Protection Advisor 5.7Emc Data Protection Advisor 5.6Emc Data Protection Advisor 5.0Emc Data Protection Advisor 5.7.1Emc Data Protection Advisor
NA
CVE-2012-0406
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 up to and including 5.8 SP1 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a...
Emc Data Protection Advisor 5.6Emc Data Protection Advisor 5.7Emc Data Protection Advisor 5.5Emc Data Protection Advisor 5.8
NA
CVE-2012-0407
Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 up to and including 5.8 SP1 allows remote malicious users to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field.
Emc Data Protection Advisor 5.6Emc Data Protection Advisor 5.7Emc Data Protection Advisor 5.5Emc Data Protection Advisor 5.8
7.5
CVSSv3
CVE-2016-8211
EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users t...
Dell Emc Data Protection Advisor 6.1Dell Emc Data Protection Advisor 6.2Dell Emc Data Protection Advisor 6.2.1Dell Emc Data Protection Advisor 6.2.2Dell Emc Data Protection Advisor 6.2.3
NA
CVE-2012-4616
Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote malicious users to read arbitrary files via unspecified vectors.
Emc Data Protection Advisor 5.7Emc Data Protection Advisor 5.8Emc Data Protection Advisor 5.6
7.5
CVSSv3
CVE-2020-5351
Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain...
Dell Emc Data Protection Advisor 6.4Dell Emc Data Protection Advisor 6.5Dell Emc Data Protection Advisor 18.1
8.8
CVSSv3
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system.
Dell Emc Data Protection Advisor 6.4Dell Emc Data Protection Advisor 6.5Dell Emc Data Protection Advisor 18.1
8.1
CVSSv3
CVE-2018-11048
Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit t...
Dell Emc Data Protection Advisor 6.2Dell Emc Data Protection Advisor 6.3Dell Emc Data Protection Advisor 6.4Dell Emc Data Protection Advisor 6.5Dell Emc Integrated Data Protection Appliance 2.0Dell Emc Integrated Data Protection Appliance 2.1
7.8
CVSSv3
CVE-2018-1206
Dell EMC Data Protection Advisor versions before 6.3 Patch 159 and Dell EMC Data Protection Advisor versions before 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local acces...
Emc Data Protection Advisor 6.3.0Emc Data Protection Advisor 6.4.0
9.8
CVSSv3
CVE-2017-8013
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon&quo...
Emc Data Protection Advisor 6.4.0Emc Data Protection Advisor 6.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook