Emc Data Domain Os

Vendor:

First CVE: Jun 19, 2016 · Active for 10 years

12

Total CVEs

More Total CVEs than 91% of tracked products

4.0

Avg CVEs / Year

Higher CVE frequency than 85% of tracked products

7.2

Avg CVSS

Higher Avg CVSS than 48% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Emc Data Domain Os over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jun 19, 2016

10 years ago

Most Recent CVE

Dec 14, 2023

957 days ago

CVE Severity & Scoring

Emc Data Domain Os12 CVEs

50%

42%

8%

All CVEs353,173 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local7 (58.3%)

Network5 (41.7%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low12 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None11 (91.7%)

Unknown0 (0.0%)

Required1 (8.3%)

Privileges Required

Low4 (33.3%)

High6 (50.0%)

None2 (16.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2023-23692HIGH Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to t	Feb 1, 2023	8.8	28	NO	NO
CVE-2016-0912CRITICAL EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account	Jun 19, 2016	9.8	25	NO	NO
CVE-2016-8216MEDIUM EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.	Feb 3, 2017	6.7	23	NO	NO
CVE-2023-44285HIGH Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privile	Dec 14, 2023	7.8	22	NO	NO
CVE-2023-44277HIGH Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker	Dec 14, 2023	7.8	22	NO	NO
CVE-2016-0911HIGH EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by lev	Jun 19, 2016	8.2	21	NO	NO
CVE-2023-48667HIGH Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privile	Dec 14, 2023	7.2	20	NO	NO
CVE-2023-44286MEDIUM Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacke	Dec 14, 2023	6.1	20	NO	NO
CVE-2023-44279MEDIUM Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privil	Dec 14, 2023	6.7	20	NO	NO
CVE-2023-44278MEDIUM Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentia	Dec 14, 2023	6.7	19	NO	NO

View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Emc Data Domain Os

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
6.0	1	6.7	0.4%
5.7	2	6.7	0.6%
5.6	2	6.7	0.6%
5.5	2	6.7	0.6%
5.4	2	6.7	0.6%
5.2	1	6.7	0.4%