Known vulnerabilities in Dell PowerProtect Data Manager
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-73600 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level… | 7.8 High | Sep 3, 2026 |
| CVE-2026-68860 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability | 6.8 Medium | Sep 3, 2026 |
| CVE-2026-74769 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the… | 6.5 Medium | Sep 3, 2026 |
| CVE-2026-74768 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF)… | 4.1 Medium | Sep 3, 2026 |
| CVE-2026-46737 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the… | 6.7 Medium | Jul 22, 2026 |
| CVE-2026-49499 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens… | 8.8 High | Jul 22, 2026 |
| CVE-2026-46738 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the… | 9.1 Critical | Jul 22, 2026 |
| CVE-2026-40712 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the… | 9.1 Critical | Jul 22, 2026 |
| CVE-2026-40714 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability | 7.2 High | Jul 22, 2026 |
| CVE-2026-44276 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an… | 6.0 Medium | Jul 22, 2026 |
| CVE-2026-22267 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability | 8.1 High | Feb 19, 2026 |
| CVE-2026-22268 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability | 6.3 Medium | Feb 19, 2026 |
| CVE-2026-22266 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a… | 4.7 Medium | Feb 19, 2026 |
| CVE-2026-22269 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a… | 4.7 Medium | Feb 19, 2026 |
| CVE-2025-43886 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//'… | 4.4 Medium | Sep 10, 2025 |
| CVE-2025-43938 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password… | 5.0 Medium | Sep 10, 2025 |
| CVE-2025-43887 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions… | 7.0 High | Sep 10, 2025 |
| CVE-2025-43725 | Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default… | 7.8 High | Sep 10, 2025 |
| CVE-2025-43885 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special… | 7.8 High | Sep 10, 2025 |
| CVE-2025-43884 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special… | 8.2 High | Sep 10, 2025 |
| CVE-2025-43888 | Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information… | 8.8 High | Sep 10, 2025 |
| CVE-2025-30480 | Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in… | 6.5 Medium | Jul 30, 2025 |
| CVE-2025-23377 | Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of… | 4.2 Medium | Apr 28, 2025 |
| CVE-2025-23375 | Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability | 7.8 High | Apr 28, 2025 |
| CVE-2024-25971 | Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability | 5.5 Medium | Mar 28, 2024 |
Other Dell products
PowerScale OneFS 175
CPG BIOS 110
Secure Connect Gateway 5.0 - Appliance 104
Secure Connect Gateway 5.0 - Application 103
PowerProtect Data Domain 82
Wyse Management Suite 62
Unity 62
Secure Connect Gateway (SCG) Policy Manager 45
OpenManage Enterprise 41
PowerEdge Platform 32
SmartFabric OS10 Software 31
Alienware Command Center (AWCC) 25