CVE-2024-47977: SQL Injection
Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47977?
CVE-2024-47977 has a low severity rating, allowing low privileged attackers to exploit it.
How do I fix CVE-2024-47977?
To fix CVE-2024-47977, ensure you apply the latest security updates provided by Dell for Avamar.
What versions of Dell Avamar are affected by CVE-2024-47977?
CVE-2024-47977 affects Dell Avamar versions 19.0 through 19.10, including specific service packs.
What type of vulnerability is CVE-2024-47977?
CVE-2024-47977 is classified as an SQL Injection vulnerability.
Can CVE-2024-47977 lead to data breaches?
Yes, CVE-2024-47977 can potentially be exploited by attackers to execute commands that may compromise the system.