Skip to content
OpenAdvisories
High · 8.3 CVE-2024-9134 EUVD-2024-50433GHSA-6cj3-78w9-39gx

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

Published Jan 10, 2025 · Updated Jan 13, 2025 · Assigned by Arista

Vendor: Arista Networks Product: Arista Edge Threat Management Category: Browsers Category: Network devices

Description

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

Affected products

VendorProductAffectedFixed
Arista Networks Arista Edge Threat Management 17.1.0 – ≤ 17.1.1 —

References