Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
alicious payloads in the (1) Text Box fields of Address, Address Line 2, Postal Code and City fields and (2) Drop Down menu options of Address Use, State and Country of the Additional Addresses section of the Contact tab in Patient Demographics. The injected script can execute in two scenarios: (1) dynamically during form input, and (2) when the form data is later loaded for editing. Version 7.0.3.4 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/security/advisories/GHSA-2h9p-7vmc-wmqv
CVE ID: CVE-2025-43861 State: PUBLISHED Published: 2025-04-24T20:49:57.692Z Last Updated: 2025-04-25T19:32:14.066Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: miraheze Products: ManageWiki Problem Types: CWE-79 Description: ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes" dialog, the payload will be rendered and executed in the context of their own session. This issue has been patched in commit 2f177dc. Additiona
l be rendered and executed in the context of their own session. This issue has been patched in commit 2f177dc. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/ManageWiki/security/advisories/GHSA-859x-46h8-vcrv - https://github.com/miraheze/ManageWiki/commit/2f177dc83b28b727613215b835d4036cb179e4ab
CVE ID: CVE-2025-43862 State: PUBLISHED Published: 2025-04-25T15:05:32.172Z Last Updated: 2025-04-25T15:54:38.110Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: langgenius Products: dify Problem Types: CWE-284, CWE-862 Description: Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-admin users to make unauthorized access and changes on the APPSs. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the the acc
APPSs. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can access Orchestration of the APPs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langgenius/dify/security/advisories/GHSA-6pw4-jqhv-3626 - https://github.com/langgenius/dify/pull/5266
CVE ID: CVE-2025-43863 State: PUBLISHED Published: 2025-06-12T17:29:57.047Z Last Updated: 2025-06-12T17:54:44.017Z Vendors: vantage6 Products: vantage6 Problem Types: CWE-307 Description: vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. If attacker gets access to an authenticated session, they can try to brute-force the user password by using the change password functionality: they can call that route infinitely which will return the message that password is wrong until it is correct. This vulnerability is fixed in 4.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
l it is correct. This vulnerability is fixed in 4.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-j6g5-p62x-58hw
CVE ID: CVE-2025-43864 State: PUBLISHED Published: 2025-04-25T00:18:16.058Z Last Updated: 2025-04-25T15:18:38.495Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: remix-run Products: react-router Problem Types: CWE-755 Description: React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongl
tem is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322 - https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111 - https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/server.ts#L407
CVE ID: CVE-2025-43865 State: PUBLISHED Published: 2025-04-25T00:18:53.222Z Last Updated: 2025-04-25T15:16:00.202Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: remix-run Products: react-router Problem Types: CWE-345 Description: React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remix-run/react-router/secu
n 7.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j - https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111 - https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87
CVE ID: CVE-2025-43866 State: PUBLISHED Published: 2025-06-12T18:04:57.649Z Last Updated: 2025-06-13T14:06:06.347Z Vendors: vantage6 Products: vantage6 Problem Types: CWE-330 Description: vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is fixed in 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-m3mq-f375-5vgh
CVE ID: CVE-2025-43877 State: PUBLISHED Published: 2025-06-24T04:37:18.124Z Last Updated: 2025-06-25T12:42:46.787Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: ELECOM CO.,LTD. Products: WRC-1167GHBK2-S Problem Types: CWE-79 Description: WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed WebGUI of the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-02/ - https://jvn.jp/en/jp/JVN39435597/
CVE ID: CVE-2025-43878 State: PUBLISHED Published: 2025-05-07T22:04:08.402Z Last Updated: 2025-05-08T13:00:05.372Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-149, CWE-1286 Description: When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5
chnical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000139502
CVE ID: CVE-2025-43879 State: PUBLISHED Published: 2025-06-24T04:37:25.159Z Last Updated: 2025-06-26T19:25:19.938Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ELECOM CO.,LTD. Products: WRH-733GBK, WRH-733GWH Problem Types: CWE-78 Description: WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function. If a remote unauthenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-0
uted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-02/ - https://jvn.jp/en/jp/JVN39435597/
CVE ID: CVE-2025-43880 State: PUBLISHED Published: 2025-06-25T05:31:29.560Z Last Updated: 2025-06-25T13:35:33.651Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GROWI, Inc. Products: GROWI Problem Types: CWE-1333 Description: Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a logged-in user may cause a denial of service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/weseek/growi/pull/9487 - https://jvn.jp/en/jp/JVN21624250/
CVE ID: CVE-2025-43881 State: PUBLISHED Published: 2025-07-23T04:38:35.253Z Last Updated: 2025-07-23T15:14:12.246Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: SYNCK GRAPHICA Products: Real-time Bus Tracking System Problem Types: CWE-1284 Description: Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1. If exploited, a denial of service (DoS) condition may be caused by an attacker who can log in to the administrative page of the affected product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synck.com/downloads/cgi-perl/buslocationsystem/index.html - https://
- CISA ADP Vulnrichment: References: - https://www.synck.com/downloads/cgi-perl/buslocationsystem/index.html - https://jvn.jp/en/jp/JVN21177718/
CVE ID: CVE-2025-43882 State: PUBLISHED Published: 2025-08-27T13:51:40.130Z Last Updated: 2025-08-28T03:55:23.169Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: ThinOS 10 Problem Types: CWE-283 Description: Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Unauthorized Access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331
CVE ID: CVE-2025-43884 State: PUBLISHED Published: 2025-09-10T15:47:40.671Z Last Updated: 2025-09-11T03:56:24.631Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Manager Problem Types: CWE-78 Description: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities
CVE ID: CVE-2025-43885 State: PUBLISHED Published: 2025-09-10T15:52:28.608Z Last Updated: 2025-09-11T14:43:15.488Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Manager Problem Types: CWE-78 Description: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities
CVE ID: CVE-2025-43886 State: PUBLISHED Published: 2025-09-10T16:08:55.075Z Last Updated: 2025-09-11T13:24:30.089Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerProtect Data Manager Problem Types: CWE-35 Description: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-da
: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities
CVE ID: CVE-2025-43887 State: PUBLISHED Published: 2025-09-10T15:59:56.185Z Last Updated: 2025-09-11T14:43:04.073Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Manager Problem Types: CWE-276 Description: Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manag
nces: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities
CVE ID: CVE-2025-43888 State: PUBLISHED Published: 2025-09-10T15:42:34.448Z Last Updated: 2025-09-11T14:43:20.576Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Manager Problem Types: CWE-532 Description: Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-power
lnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities
CVE ID: CVE-2025-43889 State: PUBLISHED Published: 2025-10-07T18:37:23.322Z Last Updated: 2025-10-07T18:54:02.781Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-22 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4, LTS2024 release Versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 throug
ions 7.7.1.0 through 8.4, LTS2024 release Versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-43890 State: PUBLISHED Published: 2025-10-07T17:53:41.316Z Last Updated: 2025-10-08T03:55:19.258Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 relea
ata Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-del
ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-43891 State: PUBLISHED Published: 2025-10-07T18:43:06.999Z Last Updated: 2025-10-07T19:25:43.043Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-327 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 rele
Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an use of a Broken or Risky Cryptographic Algorithm vulnerability in the Authentication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-43893 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:09.354Z Description: No description available.
CVE ID: CVE-2025-43894 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:08.883Z Description: No description available.
CVE ID: CVE-2025-43895 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:08.376Z Description: No description available.
CVE ID: CVE-2025-43896 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:07.725Z Description: No description available.
CVE ID: CVE-2025-43897 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:07.176Z Description: No description available.
CVE ID: CVE-2025-43898 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:06.642Z Description: No description available.
CVE ID: CVE-2025-43899 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:06.143Z Description: No description available.
CVE ID: CVE-2025-43900 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:05.637Z Description: No description available.
CVE ID: CVE-2025-43901 State: REJECTED Published: N/A Last Updated: 2025-04-19T02:55:05.016Z Description: No description available.
CVE ID: CVE-2025-43903 State: PUBLISHED Published: 2025-04-18T00:00:00.000Z Last Updated: 2025-04-21T02:51:02.614Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: freedesktop Products: Poppler Problem Types: CWE-347 Description: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/poppler/poppler/-/commit/f1b9c830f145a0042e853d6462b2f9ca4016c669
CVE ID: CVE-2025-43905 State: PUBLISHED Published: 2025-10-07T19:06:13.630Z Last Updated: 2025-10-08T15:48:07.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-88 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 relea
ata Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-43906 State: PUBLISHED Published: 2025-10-07T18:02:09.537Z Last Updated: 2025-10-08T03:55:24.150Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 relea
CVE ID: CVE-2025-43907 State: PUBLISHED Published: 2025-10-07T18:14:36.232Z Last Updated: 2025-10-07T19:37:21.043Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-35 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 relea