Dell Data Domain Operating System vulnerabilities
99 known vulnerabilities affecting dell/data_domain_operating_system.
Total CVEs
99
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH38MEDIUM52LOW5
Vulnerabilities
Page 3 of 5
CVE-2026-49813P3MEDIUMCVSS 6.7≥ 7.7.1.0, ≤ 7.13.1.70≥ 8.0.0.0, ≤ 8.3.1.30+1 more2026-07-03
CVE-2026-49813 [MEDIUM] CWE-78 CVE-2026-49813: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged atta
nvd
CVE-2026-35073P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.13.1.70≥ 7.14.0.0, < 8.3.1.30+2 more2026-04-17
CVE-2026-35073 [MEDIUM] CWE-78 CVE-2026-35073: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization
of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could potentially
nvd
CVE-2026-35074P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.13.1.70≥ 7.14.0.0, < 8.3.1.30+2 more2026-04-17
CVE-2026-35074 [MEDIUM] CWE-78 CVE-2026-35074: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization
of special elements used in an OS Command Injection vulnerability. A high privileged attacker with local access could potentially
nvd
CVE-2026-35072P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.13.1.70≥ 7.14.0.0, < 8.3.1.30+2 more2026-04-17
CVE-2026-35072 [MEDIUM] CWE-78 CVE-2026-35072: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization
of special elements used in an OS command ('OS command injection') vulnerability. A high privileged attacker with local access co
nvd
CVE-2025-46641P3MEDIUMCVSS 6.6≥ 8.4.0.0, ≤ 8.5.0.02026-04-17
CVE-2025-46641 [MEDIUM] CWE-287 CVE-2025-46641: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
nvd
CVE-2026-46463P3MEDIUMCVSS 6.5≥ 7.7.1.0, ≤ 7.13.1.70≥ 8.0.0.0, ≤ 8.3.1.30+1 more2026-07-03
CVE-2026-46463 [MEDIUM] CWE-190 CVE-2026-46463: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vul
nvd
CVE-2026-54483P3MEDIUMCVSS 6.7≥ 7.7.1.0, ≤ 7.13.1.70≥ 8.0.0.0, ≤ 8.3.1.30+1 more2026-07-03
CVE-2026-54483 [MEDIUM] CWE-78 CVE-2026-54483: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged atta
nvd
CVE-2025-36569P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.13.1.0, < 7.13.1.30+1 more2025-10-07
CVE-2025-36569 [MEDIUM] CWE-78 CVE-2025-36569: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A h
nvd
CVE-2025-30096P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.11.0.0, < 7.13.1.30+1 more2025-08-04
CVE-2025-30096 [MEDIUM] CWE-78 CVE-2025-30096: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in t
nvd
CVE-2025-30097P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.11.0.0, < 7.13.1.30+1 more2025-08-04
CVE-2025-30097 [MEDIUM] CWE-78 CVE-2025-30097: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in t
nvd
CVE-2025-30098P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.11.0.0, < 7.13.1.30+1 more2025-08-04
CVE-2025-30098 [MEDIUM] CWE-78 CVE-2025-30098: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in t
nvd
CVE-2025-43907P3MEDIUMCVSS 6.5≥ 7.7.1.0, < 7.10.1.70≥ 7.13.1.0, < 7.13.1.40+2 more2025-10-07
CVE-2025-43907 [MEDIUM] CWE-35 CVE-2025-43907: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Path Traversal: '.../...//' vulnerability. A low privileged attacker with rem
nvd
CVE-2026-23777P3MEDIUMCVSS 6.5≥ 7.7.1.0, ≤ 8.5.0.02026-04-17
CVE-2026-23777 [MEDIUM] CWE-200 CVE-2026-23777: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote acces
nvd
CVE-2025-36566P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.13.1.0, < 7.13.1.30+1 more2025-10-07
CVE-2025-36566 [MEDIUM] CWE-78 CVE-2025-36566: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A h
nvd
CVE-2025-36567P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.60≥ 7.13.1.0, < 7.13.1.30+1 more2025-10-07
CVE-2025-36567 [MEDIUM] CWE-78 CVE-2025-36567: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A h
nvd
CVE-2025-46644P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.80≥ 7.13.1.0, < 7.13.1.50+2 more2026-01-09
CVE-2025-46644 [MEDIUM] CWE-78 CVE-2025-46644: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman
nvd
CVE-2025-43908P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.70≥ 7.13.1.0, < 7.13.1.40+2 more2025-10-07
CVE-2025-43908 [MEDIUM] CWE-78 CVE-2025-43908: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comma
nvd
CVE-2026-26951P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.13.1.70≥ 8.3.1.0, < 8.3.1.30+1 more2026-04-20
CVE-2026-26951 [MEDIUM] CWE-121 CVE-2026-26951: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with
nvd
CVE-2024-45759P3HIGHCVSS 7.3≥ 7.7.1.0, < 7.7.5.50≥ 7.10.0.0, < 7.10.1.40+2 more2024-11-08
CVE-2024-45759 [HIGH] CWE-266 CVE-2024-45759: Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contai
Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of privilege vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to unauthorized execution of certain commands to overwrite system config of the application. Exploitation may lead to deni
nvd
CVE-2025-43890P3MEDIUMCVSS 6.7≥ 7.7.1.0, < 7.10.1.70≥ 7.13.1.0, < 7.13.1.40+2 more2025-10-07
CVE-2025-43890 [MEDIUM] CWE-78 CVE-2025-43890: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comma
nvd