6.5
Medium
CVE-2025-43907 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Path Traversal: '.../...//' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release 7.7 | 7.7.1.0 → < 8.4.0.0 | 8.4.0.0 |
| PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3 | 8.3.1.0 → < 8.3.1.10 | 8.3.1.10 |
| PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13 | 7.13.1.0 → < 7.13.1.40 | 7.13.1.40 |
| PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10 | 7.10.1.0 → < 7.10.1.70 | 7.10.1.70 |
Other CVEs of PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release
The 18 CVEs of PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release →
CVE-2025-36565
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Medium
CVE-2025-36566
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Medium
CVE-2025-36569
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Medium
CVE-2025-36567
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Medium