Dell Recoverpoint For Virtual Machines — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Recoverpoint For Virtual Machines, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2026-22769 — CVSS 10.0 (critical) — actively exploited: Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered…
• CVE-2024-22461 — CVSS 8.8 (high): Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could…
• CVE-2024-22426 — CVSS 7.2 (high): Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker…
• CVE-2025-21105 — CVSS 6.6 (medium): Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access…
• CVE-2024-24902 — CVSS 6.6 (medium): Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local attacker could…
• CVE-2024-38488 — CVSS 6.5 (medium): Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability…
• CVE-2024-22425 — CVSS 6.5 (medium): Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote…
• CVE-2024-28980 — CVSS 6.5 (medium): Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An…
• CVE-2019-3727 — CVSS 6.4 (medium): Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection…
• CVE-2025-21106 — CVSS 5.5 (medium): Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could…
• CVE-2024-48007 — CVSS 5.3 (medium): Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could…
• CVE-2024-48008 — CVSS 5.3 (medium): Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could…
• CVE-2024-47984 — CVSS 4.4 (medium): Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit…