4.3
Medium
CVE-2021-36349 Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the…
Description
Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Protection Central 19.6 | earliest → < 19.6 | 19.6 |
Other CVEs of Data Protection Central
The 6 CVEs of Data Protection Central →
CVE-2023-4129
Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability
5.9
Medium
CVE-2022-45102
Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability
5.4
Medium
CVE-2022-34367
Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery…
5.4
Medium
CVE-2021-43588
Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability
4.3
Medium