[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5gnEQGeQRCMsZVO_1z-C-ocfMGqYLM36hj-Lu2flZu4":3,"g5a-ex:dell\u002Femc_integrated_data_protection_appliance@*":126,"g5a-family:dell\u002Femc_integrated_data_protection_appliance":128},{"success":4,"data":5},true,{"product":6,"versions":35,"topVulnerabilitiesByEpss":43,"kevVulnerabilities":103,"seoMetadata":104,"meta":123},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":34},"dell","emc_integrated_data_protection_appliance",7,16,0,"2021-08-10",[14,18,21,24,27,29,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",9,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.1",8,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"2.2",6,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"2.3",3,{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},"2.4",{"version":30,"cve_count":26,"kev_count":11,"has_kev":17},"2.5",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"2.6",4,"Emc Integrated Data Protection Appliance by Dell is a technology product with 7 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[36,37,38,39,40,41,42],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},{"version":30,"cve_count":26,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},[44,52,57,64,68,75,81,87,93,98],{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":51},"CVE-2018-1217","Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or change the Local Download Service (LDLS) credentials. The LDLS credentials are used to connect to Dell EMC Online Support. If the LDLS configuration was changed to an invalid configuration, then Avamar Installation Manager may not be able to connect to Dell EMC Online Support web site successfully. The remote unauthenticated attacker can also read and use the credentials to login to Dell EMC Online Support, impersonating the AVI service actions using those credentials.","2018-04-09",9.8,"v3.0","Critical",0.50874,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":56},"CVE-2018-11066","Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.","2018-11-26",0.09906,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":50,"isKev":17,"epssScore":63},"CVE-2020-29495","DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high privileges. This vulnerability is considered critical as it can be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.","2021-01-14",10,"v3.1",0.06422,{"cveId":65,"description":66,"publishedDate":60,"cvssScore":48,"cvssVersion":62,"severity":50,"isKev":17,"epssScore":67},"CVE-2020-29493","DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database, causing unauthorized read and write access to application data. Exploitation may lead to leakage or deletion of sensitive backup data; hence the severity is Critical. Dell EMC recommends customers to upgrade at the earliest opportunity.",0.02724,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":62,"severity":73,"isKev":17,"epssScore":74},"CVE-2018-11048","Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.","2018-08-10",8.1,"High",0.02064,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":62,"severity":73,"isKev":17,"epssScore":80},"CVE-2020-5350","Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords and execution of malicious commands on ACM component.","2020-04-15",7.2,0.01975,{"cveId":82,"description":83,"publishedDate":55,"cvssScore":84,"cvssVersion":49,"severity":85,"isKev":17,"epssScore":86},"CVE-2018-11067","Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.",6.1,"Medium",0.01811,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":49,"severity":73,"isKev":17,"epssScore":92},"CVE-2018-11062","Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.","2018-11-02",8.8,0.01769,{"cveId":94,"description":95,"publishedDate":60,"cvssScore":96,"cvssVersion":62,"severity":73,"isKev":17,"epssScore":97},"CVE-2020-29494","Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the arbitrary files stored on the server filesystem, causing deletion of arbitrary files.",8.7,0.01701,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":72,"cvssVersion":62,"severity":73,"isKev":17,"epssScore":102},"CVE-2019-3765","Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.","2019-10-09",0.01135,[],{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Emc Integrated Data Protection Appliance by Dell - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Emc Integrated Data Protection Appliance by Dell covering 7 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Emc Integrated Data Protection Appliance vulnerabilities, Emc Integrated Data Protection Appliance security, Emc Integrated Data Protection Appliance CVE, Dell Emc Integrated Data Protection Appliance, Emc Integrated Data Protection Appliance threat intelligence, Dell security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":109,"@type":110,"name":111,"description":106,"url":112,"manufacturer":113,"applicationCategory":117,"softwareVersion":118,"mainEntity":119},"https:\u002F\u002Fschema.org","SoftwareApplication","Emc Integrated Data Protection Appliance","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdell\u002Femc_integrated_data_protection_appliance",{"@type":114,"name":115,"url":116},"Organization","Dell","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdell","Security Software","7 versions tracked",{"@type":120,"name":121,"description":122,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Emc Integrated Data Protection Appliance Security Vulnerabilities","Security vulnerabilities affecting Emc Integrated Data Protection Appliance by Dell",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":124,"apiVersion":125},"2026-10-18T13:02:18.904Z","3.0",{"rows":127,"total":11,"capped":17,"failed":11},[],[129],{"product":130,"cves":23},"emc_integrated_data_protection_appliance_firmware"]