7.2
High
CVE-2024-22445 Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability
Description
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect Data Manager 19.15 | earliest → 19.15 | No fix stated |
| powerprotect_data_manager 19.15 | earliest → 19.15 | No fix stated |
Other CVEs of PowerProtect Data Manager
The 27 CVEs of PowerProtect Data Manager →
CVE-2026-73600
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level…
7.8
High
CVE-2026-68860
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability
6.8
Medium
CVE-2026-74769
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the…
6.5
Medium
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF)…
4.1
Medium