8.8
High
CVE-2021-36328 Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability
Description
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell EMC Streaming Data Platform 1.3 | earliest → < 1.3 | 1.3 |
Other CVEs of Dell EMC Streaming Data Platform
The 5 CVEs of Dell EMC Streaming Data Platform →
CVE-2021-36330
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability
8.1
High
CVE-2021-36329
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability
6.5
Medium
CVE-2021-36327
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability
5.3
Medium
CVE-2021-36326
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI)
6.5
Medium