VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-44286

CVE-2023-44286

Description

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the injection of malicious HTML or JavaScript code to a victim user's DOM environment in the browser. . Exploitation may lead to information disclosure, session theft, or client-side request forgery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Dell/Apex Protection Storage
    cpe:2.3:a:dell:apex_protection_storage:*:*:*:*:*:*:*:*
    Range: <6.2.1.110
  • Dell/Powerprotect Data Domain
    cpe:2.3:a:dell:powerprotect_data_domain:*:*:*:*:virtual:*:*:*
    Range: <6.2.1.110
  • Dell/Powerprotect Data Domain Management Center3 versions
    cpe:2.3:a:dell:powerprotect_data_domain_management_center:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:dell:powerprotect_data_domain_management_center:*:*:*:*:*:*:*:*range: <6.2.1.110
    • cpe:2.3:o:dell:powerprotect_data_domain_management_center:*:*:*:*:lts2022:*:*:*range: >=7.7,<7.7.5.25
    • cpe:2.3:o:dell:powerprotect_data_domain_management_center:*:*:*:*:lts2023:*:*:*range: >=7.10,<7.10.1.15
  • Dell/Powerprotect Data Protection
    cpe:2.3:a:dell:powerprotect_data_protection:*:*:*:*:*:*:*:*
    Range: <2.7.6
  • Dell/Emc Data Domain OS3 versions
    cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:*range: <6.2.1.110
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts2022:*:*:*range: >=7.7,<7.7.5.25
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts2023:*:*:*range: >=7.10,<7.10.1.15
  • Dell/PowerProtect DDllm-fuzzy2 versions
    <7.13.0.10, <LTS 7.7.5.25, <LTS 7.10.1.15, <6.2.1.110+ 1 more
    • (no CPE)range: <7.13.0.10, <LTS 7.7.5.25, <LTS 7.10.1.15, <6.2.1.110
    • (no CPE)range: Versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110ersions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.