Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-36300 State: PUBLISHED Published: 2021-11-23T20:00:33.319260Z Last Updated: 2024-09-16T19:57:27.592Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-89 Description: iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.emc.com/kb/000191229
CVE ID: CVE-2021-36301 State: PUBLISHED Published: 2021-11-23T20:00:34.636946Z Last Updated: 2024-09-17T00:56:05.411Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-121 Description: Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://support.emc.com/kb/000191229
CVE ID: CVE-2021-36302 State: PUBLISHED Published: 2022-02-09T20:00:14.155401Z Last Updated: 2024-09-16T20:37:45.252Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell EMC Integrated System for Microsoft Azure Stack Hub Problem Types: CWE-269 Description: All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000191165/dsa-202
itional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000191165/dsa-2021-178-dell-emc-integrated-solution-for-microsoft-azure-stack-hub-security-update-for-a-just-enough-administration-jea-vulnerability
CVE ID: CVE-2021-36305 State: PUBLISHED Published: 2021-11-12T22:15:17.318244Z Last Updated: 2024-09-16T18:33:24.071Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000192046
CVE ID: CVE-2021-36306 State: PUBLISHED Published: 2021-11-20T01:40:17.518559Z Last Updated: 2024-09-17T02:06:39.405Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Networking OS Problem Types: CWE-287 Description: Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193076
CVE ID: CVE-2021-36307 State: PUBLISHED Published: 2021-11-20T01:40:19.082212Z Last Updated: 2024-09-16T16:13:31.006Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Networking OS Problem Types: CWE-269 Description: Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193076
CVE ID: CVE-2021-36308 State: PUBLISHED Published: 2021-11-20T01:40:20.366725Z Last Updated: 2024-09-16T18:55:12.374Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Networking OS Problem Types: CWE-288 Description: Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193076
CVE ID: CVE-2021-36309 State: PUBLISHED Published: 2021-10-01T20:20:59.512694Z Last Updated: 2024-09-16T21:04:22.104Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Enterprise SONiC OS Problem Types: CWE-256 Description: Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000191690/DSA-2021-190-Dell-Enterprise-SONiC-OS-
ogram Container: References: - https://www.dell.com/support/kbdoc/en-us/000191690/DSA-2021-190-Dell-Enterprise-SONiC-OS-Security-Update-for-an-information-disclosure-Vulnerability
CVE ID: CVE-2021-36310 State: PUBLISHED Published: 2021-11-20T01:40:21.769345Z Last Updated: 2024-09-17T01:15:38.953Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Dell Networking OS10 Problem Types: CWE-693 Description: Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193076
CVE ID: CVE-2021-36311 State: PUBLISHED Published: 2021-11-23T20:00:36.009432Z Last Updated: 2024-09-16T22:09:32.231Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Dell Products: NetWorker Problem Types: CWE-285 Description: Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000192419
CVE ID: CVE-2021-36312 State: PUBLISHED Published: 2021-11-23T20:00:37.506682Z Last Updated: 2024-09-16T20:01:33.590Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-259 Description: Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36313 State: PUBLISHED Published: 2021-11-23T20:00:38.899754Z Last Updated: 2024-09-16T18:40:04.484Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-74 Description: Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to c
ion may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36314 State: PUBLISHED Published: 2021-11-23T20:00:40.411472Z Last Updated: 2024-09-16T17:48:01.370Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dell Products: CloudLink Problem Types: Other Description: Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary files on the end user system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36315 State: PUBLISHED Published: 2021-11-12T22:15:18.841440Z Last Updated: 2024-09-17T00:31:18.055Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale Nodes Problem Types: Other Description: Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193005/
CVE ID: CVE-2021-36316 State: PUBLISHED Published: 2021-12-21T17:05:22.027039Z Last Updated: 2024-09-16T16:53:35.976Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: Dell Products: Avamar Problem Types: CWE-269 Description: Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000193369
CVE ID: CVE-2021-36317 State: PUBLISHED Published: 2021-12-21T17:05:23.574041Z Last Updated: 2024-09-16T16:42:30.521Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Avamar Problem Types: CWE-256 Description: Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.
rivileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000193369 - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-36318 State: PUBLISHED Published: 2021-12-21T17:05:25.057117Z Last Updated: 2024-09-17T02:10:36.663Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Avamar Problem Types: CWE-532 Description: Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000193369 - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-36319 State: PUBLISHED Published: 2021-11-20T01:40:23.111503Z Last Updated: 2024-09-16T22:45:28.660Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Dell Networking OS10 Problem Types: CWE-665 Description: Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193076
CVE ID: CVE-2021-36320 State: PUBLISHED Published: 2021-11-20T01:40:24.454266Z Last Updated: 2024-09-16T16:54:08.575Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Networking X-Series Problem Types: CWE-331 Description: Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilit
m/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2021-36321 State: PUBLISHED Published: 2021-11-20T01:40:25.789744Z Last Updated: 2024-09-16T22:41:36.814Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Networking X-Series Problem Types: CWE-20 Description: Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-mul
nces: - https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2021-36322 State: PUBLISHED Published: 2021-11-20T01:40:27.169266Z Last Updated: 2024-09-17T01:31:45.792Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Networking X-Series Problem Types: CWE-20 Description: Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-s
gram Container: References: - https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2021-36323 State: PUBLISHED Published: 2021-11-12T22:15:20.406502Z Last Updated: 2024-09-17T02:02:47.330Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000192967
CVE ID: CVE-2021-36324 State: PUBLISHED Published: 2021-11-12T22:15:21.957086Z Last Updated: 2024-09-16T18:13:48.548Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000192967
CVE ID: CVE-2021-36325 State: PUBLISHED Published: 2021-11-12T22:15:23.455226Z Last Updated: 2024-09-16T20:31:51.469Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000192967
CVE ID: CVE-2021-36326 State: PUBLISHED Published: 2021-11-30T20:40:13.891591Z Last Updated: 2024-09-17T02:16:35.604Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell EMC Streaming Data Platform Problem Types: CWE-757 Description: Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted format. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/00019369
rmat. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities
CVE ID: CVE-2021-36327 State: PUBLISHED Published: 2021-11-30T20:40:15.252076Z Last Updated: 2024-09-16T17:15:17.003Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Dell EMC Streaming Data Platform Problem Types: CWE-918 Description: Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697
ice. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities
CVE ID: CVE-2021-36328 State: PUBLISHED Published: 2021-11-30T20:40:16.521878Z Last Updated: 2024-09-16T16:47:56.514Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell EMC Streaming Data Platform Problem Types: CWE-598 Description: Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-d
VE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities
CVE ID: CVE-2021-36329 State: PUBLISHED Published: 2021-11-30T20:40:18.040767Z Last Updated: 2024-09-16T19:46:28.502Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell EMC Streaming Data Platform Problem Types: CWE-639 Description: Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities
CVE ID: CVE-2021-36330 State: PUBLISHED Published: 2021-11-30T20:40:19.306587Z Last Updated: 2024-09-16T16:28:24.231Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell EMC Streaming Data Platform Problem Types: CWE-613 Description: Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-sec
iner: References: - https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities
CVE ID: CVE-2021-36332 State: PUBLISHED Published: 2021-11-23T20:00:41.753787Z Last Updated: 2024-09-16T19:15:31.852Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Dell Products: CloudLink Problem Types: Other Description: Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious websites. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36333 State: PUBLISHED Published: 2021-11-23T20:00:43.112716Z Last Updated: 2024-09-16T18:59:04.754Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-120 Description: Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker, may potentially exploit this vulnerability, leading to an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-apphttps://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightn
dellservices-lightning-force-com-one-one-apphttps://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36334 State: PUBLISHED Published: 2021-11-23T20:00:44.446536Z Last Updated: 2024-09-16T20:22:58.890Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dell Products: CloudLink Problem Types: Other Description: Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to arbitrary code execution on end user machine Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app
CVE ID: CVE-2021-36335 State: PUBLISHED Published: 2021-11-23T20:00:45.951986Z Last Updated: 2024-09-16T16:53:37.374Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: CloudLink Problem Types: CWE-20 Description: Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app