Dell Powerprotect Data Manager vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Powerprotect Data Manager: 15 record(s), with affected versions and fixes.cpe:2.3:a:dell:powerprotect_data_manager
CVE-2026-74768
Medium · 4.1
CWE-918 Sep 3, 2026
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request...
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-74769
Medium · 6.5
CWE-863 Sep 3, 2026
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization...
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass.
CVE-2026-73600
High · 7.8
CWE-121 Sep 3, 2026
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow...
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-68860
Medium · 6.8
CWE-188 Sep 3, 2026
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory...
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks.
CVE-2026-49499
High · 8.8
CWE-1270 Jul 22, 2026
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of…
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-46738
High · 7.2
CWE-20 Jul 22, 2026
Improper Input Validation in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-46737
High · 7.2
CWE-20 Jul 22, 2026
Improper Input Validation in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-44276
Medium · 4.4
CWE-200 Jul 22, 2026
Exposure of Sensitive Information in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-40714
High · 7.2
CWE-20 Jul 22, 2026
Improper Input Validation in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-40712
High · 7.2
CWE-20 Jul 22, 2026
Improper Input Validation in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-28264
Medium · 5.5
CWE-732 Apr 8, 2026
Incorrect Permission Assignment for Critical Resource in Dell Powerprotect Data Manager
Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-22268
Medium · 6.5
CWE-266 Feb 19, 2026
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect…
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service of a Dell Enterprise Support connection.
CVE-2026-22267
High · 8.8
CWE-266 Feb 19, 2026
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect…
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-22266
High · 8.8
CWE-146 Feb 19, 2026
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper…
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-22269
Medium · 4.7
CWE-940 Feb 19, 2026
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper…
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.