CVE-2017-8002
HighSummary
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.
Risk Assessment
Exploitation of these vulnerabilities may lead to the disclosure of sensitive information about the application, posing a risk to the organization's data security.
Recommendation
It is recommended to upgrade EMC Data Protection Advisor to version 6.4 or later to mitigate these vulnerabilities.
Other vulnerabilities in EMC Data Protection Advisor
See all- CVE-2017-10955High
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability.
- CVE-2016-8211High
EMC Data Protection Advisor versions 6.1.x, 6.2, 6.2.1, 6.2.2, and 6.2.3 prior to patch 446 contain a path traversal vulnerability that may be exploited by malicious users to compromise the affected system.
Original NVD description (English source)
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.