Vulnerabilities

TI-2021-14698 CVE-2021-36335 · GHSA-8gcx-vcr8-7vhv

Improper input validation in Dell CloudLink

MEDIUM 40

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01159 Published 2021-11-23 Fixed in 7.1.1 CWE-20

TI-2021-14697 CVE-2021-36334 · GHSA-85pm-34g5-w3v6

LOW 31

Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00726 Published 2021-11-23 Fixed in 7.1.1 CWE-1236

TI-2021-14696 CVE-2021-36333 · GHSA-5vv2-j4x5-m889

LOW 24

Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00211 Published 2021-11-23 Fixed in 7.1.1 CWE-120

TI-2021-14695 CVE-2021-36332 · GHSA-vj26-hh8v-h6gr

LOW 25

Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00585 Published 2021-11-23 Fixed in 7.1.1 CWE-601

TI-2021-14678 CVE-2021-36314 · GHSA-wcfc-v97f-vr4j

MEDIUM 44

Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01207 Published 2021-11-23 Fixed in 7.1.1

TI-2021-14677 CVE-2021-36313 · GHSA-wm6p-qp26-2h9v

MEDIUM 43

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02076 Published 2021-11-23 Fixed in 7.1.1 CWE-74

TI-2021-14676 CVE-2021-36312 · GHSA-fxh2-f73c-x4m7

MEDIUM 41

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0107 Published 2021-11-23 Fixed in 7.1.1 CWE-259