Логотип exploitDog
bind:CVE-2024-27889
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-27889

Количество 2

Количество 2

nvd логотип

CVE-2024-27889

почти 2 года назад

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-9w96-264r-8f55

почти 2 года назад

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-27889

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS3: 8.8
0%
Низкий
почти 2 года назад
github логотип
GHSA-9w96-264r-8f55

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS3: 8.8
0%
Низкий
почти 2 года назад

Уязвимостей на страницу