How severe is CVE-2022-45102?

CVE-2022-45102 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2022-45102 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-45102?

CVE-2022-45102 primarily affects Dell Emc Data Protection Central. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2022-45102?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2022-45102 published?

CVE-2022-45102 was published on 2023-02-01 and last updated on 2026-06-17.

CVE-2022-45102

CVE-2022-45102 is a medium-severity vulnerability in Dell Emc Data Protection Central with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-116.

Key facts

Severity: Medium (CVSS 3.x base score 5.4)
EPSS exploit prediction: 0% (38th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-116
Affected product: Dell Emc Data Protection Central
Published: 2023-02-01
Last modified: 2026-06-17

Description

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.

Frequently asked questions

What is CVE-2022-45102?: Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.
How severe is CVE-2022-45102?: CVE-2022-45102 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2022-45102 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-45102?: CVE-2022-45102 primarily affects Dell Emc Data Protection Central. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2022-45102?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2022-45102 published?: CVE-2022-45102 was published on 2023-02-01 and last updated on 2026-06-17.

References

https://www.dell.com/support/kbdoc/en-us/000206329/dsa-2022-348-dell-emc-data-protection-central-security-update-for-proprietary-code-vulnerability

Affected products (3)

cpe:2.3:a:dell:emc_data_protection_central:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:dp4400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:dp5900_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Dell Emc Data Protection Central

CVE-2019-3762 — High (CVSS 7.5): Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…
CVE-2022-34367 — Medium (CVSS 5.4): Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery…
CVE-2021-43588 — Medium (CVSS 4.3): Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote…
CVE-2021-36349 — Medium (CVSS 4.3): Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC…

All CVEs affecting Dell Emc Data Protection Central →

Other CWE-116 vulnerabilities

CVE-2025-55730 — Critical (CVSS 10.0): XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in…
CVE-2025-55729 — Critical (CVSS 10.0): XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in…
CVE-2023-47143 — Critical (CVSS 10.0): IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection,…
CVE-2023-26472 — Critical (CVSS 9.9): XWiki Platform is a generic wiki platform. Starting in version 6.2-milestone-1, one can execute any wiki content with…
CVE-2022-41934 — Critical (CVSS 9.9): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with…
CVE-2022-36100 — Critical (CVSS 9.9): XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform.…

Browse all CWE-116 vulnerabilities →