CVE-2017-8002

HIGH

EMC Data Protection Advisor < 6.4 - Authenticated Blind SQL Injection

Title source: llm

Description

EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.

References (3)

Core 3

Core References

Mailing List, Third Party Advisory x_refsource_confirm

http://seclists.org/fulldisclosure/2017/Jul/12

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038841

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/99487

Scores

CVSS v3 8.8

EPSS 0.0173

EPSS Percentile 82.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-89

Status published

Products (2)

emc/data_protection_advisor < 6.3

n/a/EMC Data Protection Advisor prior to 6.4 EMC Data Protection Advisor prior to 6.4

Published Jul 09, 2017

Tracked Since Feb 18, 2026