5.3
Moyenne
CVE-2021-36327 Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability
Description
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell EMC Streaming Data Platform 1.3 | premières → < 1.3 | 1.3 |
Autres CVE de Dell EMC Streaming Data Platform
Les 5 CVE de Dell EMC Streaming Data Platform →
CVE-2021-36330
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability
8.1
Élevée
CVE-2021-36329
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability
6.5
Moyenne
CVE-2021-36328
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability
8.8
Élevée
CVE-2021-36326
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI)
6.5
Moyenne