CVE-2025-46606

An improper authentication vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access. This is a critical severity vulnerability as it allows complete system takeover.

A path traversal vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access to the system. This is a critical severity vulnerability as it allows complete system compromise.

Dell PowerProtect Data Domain in multiple versions contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Dell PowerProtect Data Domain in multiple versions contains an integer overflow or wraparound vulnerability. An unauthenticated remote attacker could exploit this flaw, leading to a denial of service (DoS).

A path traversal vulnerability in Dell PowerProtect Data Domain allows a highly privileged remote attacker to modify files outside the restricted directory. The issue affects multiple versions including LTS2024, LTS2025, and LTS2026 releases.

Dell PowerProtect Data Domain in multiple versions contains a stored cross-site scripting vulnerability. An unauthenticated attacker with remote access could exploit this flaw.

Dell PowerProtect Data Domain products in multiple versions contain an OS command injection vulnerability. This flaw allows a remote high-privileged attacker to bypass protection mechanisms.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high privileged attacker with remote access could exploit this flaw to execute arbitrary commands.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high-privileged attacker with remote access could exploit this flaw to execute arbitrary OS commands.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high-privileged attacker with remote access could exploit this flaw to execute arbitrary commands.