Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:NDell Powerprotect Cyber Recovery
APPDell< 19.18.0.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2022-34372CRITICAL9.8ten sam produkt
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A r...
CVE-2023-32465HIGH8.8ten sam produkt
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potenti...
CVE-2022-32481HIGH7.8ten sam produkt
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on vir...
CVE-2026-22769CRITICAL10.0⚠ KEVPL ✓ten sam vendor
Dell RecoverPoint for VMs — zahardkodowane dane uwierzytelniające (RCE, root)
CVE-2026-41120CRITICAL9.8PL ✓ten sam vendor
RCE w Dell Wyse Management Suite — akceptacja niezaufanych danych