Filtered by vendor Dell Subscriptions
Filtered by product Emc Streaming Data Platform Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-36330 1 Dell 1 Emc Streaming Data Platform 2021-12-02 9.8 Critical
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user.
CVE-2021-36329 1 Dell 1 Emc Streaming Data Platform 2021-12-02 6.5 Medium
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information.
CVE-2021-36328 1 Dell 1 Emc Streaming Data Platform 2021-12-01 8.8 High
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database.
CVE-2021-36327 1 Dell 1 Emc Streaming Data Platform 2021-12-01 5.3 Medium
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.
CVE-2021-36326 1 Dell 1 Emc Streaming Data Platform 2021-12-01 6.5 Medium
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted format.