Vulnerabilities > EMC > Data Protection Advisor

DATE CVE VULNERABILITY TITLE RISK
2018-03-16 CVE-2017-8013 Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges.
network
low complexity
emc CWE-798
critical
9.8
2018-03-12 CVE-2018-1206 Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0
Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges.
local
low complexity
emc CWE-798
7.8
2017-10-19 CVE-2017-10955 Improper Input Validation vulnerability in EMC Data Protection Advisor 6.3.0
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0.
network
low complexity
emc CWE-20
8.8
2017-07-09 CVE-2017-8003 Path Traversal vulnerability in EMC Data Protection Advisor
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability.
network
low complexity
emc CWE-22
4.9
2017-07-09 CVE-2017-8002 SQL Injection vulnerability in EMC Data Protection Advisor
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities.
network
low complexity
emc CWE-89
8.8