Dell PowerProtect Data Domain (DD OS) vulnerabilities

Dell PowerProtect Data Domain with DD OS contains a cross-site scripting vulnerability. A high-privileged attacker with remote access could exploit it to inject scripts.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) in Feature Release versions 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, and LTS2024 7.13.1.0 through 7.13.1.50 contains an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Dell PowerProtect Data Domain with DD OS in Feature Release versions 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, and LTS2024 7.13.1.0 through 7.13.1.50 contains a command injection vulnerability. A high-privileged attacker with local access could exploit it to gain root-level access.

Dell PowerProtect Data Domain with DD OS contains an incorrect implementation of an authentication algorithm in the RestAPI. This affects Feature Release 7.7.1.0 through 8.1.0.10, LTS2024 7.13.1.0 through 7.13.1.25, and LTS 2023 7.10.1.0 through 7.10.1.50. An unauthenticated remote attacker could potentially exploit this to gain unauthorized access.