CVE-2024-47484: SQL Injection
Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47484?
CVE-2024-47484 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2024-47484?
To fix CVE-2024-47484, you should apply the latest security updates provided by Dell for Avamar version 19.x.
What versions of Dell Avamar are affected by CVE-2024-47484?
CVE-2024-47484 affects Dell Avamar versions 19.0 through 19.10, including specific service packs.
Can CVE-2024-47484 be exploited without authentication?
Yes, CVE-2024-47484 can be exploited by unauthenticated remote attackers.
What type of vulnerability is CVE-2024-47484 classified as?
CVE-2024-47484 is classified as an SQL Injection vulnerability.