5.4
Medium
CVE-2022-45102 Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability
Description
Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Protection Central 19.1 | 19.1 → 19.7 | No fix stated |
Other CVEs of Data Protection Central
The 6 CVEs of Data Protection Central →
CVE-2023-4129
Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability
5.9
Medium
CVE-2022-34367
Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery…
5.4
Medium
CVE-2021-43588
Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability
4.3
Medium
CVE-2021-36349
Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the…
4.3
Medium