{"containers": {"cna": {"affected": [{"product": "EMC Data Protection Advisor prior to 6.4", "vendor": "n/a", "versions": [{"status": "affected", "version": "EMC Data Protection Advisor prior to 6.4"}]}], "datePublic": "2017-07-09T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands."}], "problemTypes": [{"descriptions": [{"description": "Multiple Blind SQL Injection Vulnerabilities", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-11T09:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://seclists.org/fulldisclosure/2017/Jul/12"}, {"name": "1038841", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1038841"}, {"name": "99487", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/99487"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2017-8002", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMC Data Protection Advisor prior to 6.4", "version": {"version_data": [{"version_value": "EMC Data Protection Advisor prior to 6.4"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Multiple Blind SQL Injection Vulnerabilities"}]}]}, "references": {"reference_data": [{"name": "http://seclists.org/fulldisclosure/2017/Jul/12", "refsource": "CONFIRM", "url": "http://seclists.org/fulldisclosure/2017/Jul/12"}, {"name": "1038841", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038841"}, {"name": "99487", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99487"}]}}}}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2017-8002", "datePublished": "2017-07-09T20:00:00", "dateReserved": "2017-04-21T00:00:00", "dateUpdated": "2017-07-11T09:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*", "matchCriteriaId": "E023164A-9BB1-43DC-9048-A661772FDF50", "versionEndIncluding": "6.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands."}, {"lang": "es", "value": "Data Protection Advisor anterior a versi\u00f3n 6.4 de EMC, contiene m\u00faltiples vulnerabilidades de inyecci\u00f3n SQL ciega. Un atacante autenticado remoto puede potencialmente explotar estas vulnerabilidades para conseguir informaci\u00f3n sobre la aplicaci\u00f3n causando la ejecuci\u00f3n de comandos SQL arbitrarios."}], "id": "CVE-2017-8002", "lastModified": "2017-07-17T17:57:22.507", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-07-09T20:29:00.250", "references": [{"source": "security_alert@emc.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2017/Jul/12"}, {"source": "security_alert@emc.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99487"}, {"source": "security_alert@emc.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1038841"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}