Export limit exceeded: 384563 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 384563 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-49809 1 Dell 2 Cyber Recovery, Powerprotect Cyber Recovery 2026-08-28 6.5 Medium
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-79939 1 Dell 2 Cyber Recovery, Powerprotect Cyber Recovery 2026-08-28 5.8 Medium
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
CVE-2026-79938 1 Dell 2 Cyber Recovery, Powerprotect Cyber Recovery 2026-08-28 7.6 High
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2025-26335 1 Dell 1 Powerprotect Cyber Recovery 2026-01-14 5.8 Medium
Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2023-32465 1 Dell 1 Powerprotect Cyber Recovery 2024-12-30 8.8 High
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker.
CVE-2022-34372 1 Dell 1 Powerprotect Cyber Recovery 2024-11-21 9.8 Critical
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
CVE-2022-32481 1 Dell 1 Powerprotect Cyber Recovery 2024-11-21 7.8 High
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.