Description
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EMC Data Protection Advisor prior to 6.4 | EMC Data Protection Advisor prior to 6.4 | — |
References
- http://seclists.org/fulldisclosure/2017/Jul/12
- 1038841 vdb-entry
- 99487 vdb-entry