← Database

CVE-2022-45102

MEDIUM CVSS: 5.4 Published: 2023-02-01 Modified: 2026-06-17

Description

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.

Affected Platforms

Dell Dp5900 FirmwareDell Emc Data Protection CentralDell Dp5900Dell Dp4400 FirmwareDell Dp4400

Weakness Type

CWE-644, CWE-116

References