Vulnerabilities

TI-2021-14694 CVE-2021-36330 · GHSA-jwgw-m7r5-wr43

Insufficient session expiration in Dell EMC Streaming Data Platform

MEDIUM 44

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01196 Published 2021-11-30 Fixed in 1.3 CWE-613

TI-2021-14693 CVE-2021-36329 · GHSA-47v6-26pv-9rpw

LOW 30

Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00698 Published 2021-11-30 Fixed in 1.3 CWE-639

TI-2021-14692 CVE-2021-36328 · GHSA-7h7c-cpx6-6cg3

MEDIUM 40

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00873 Published 2021-11-30 Fixed in 1.3 CWE-598

TI-2021-14691 CVE-2021-36327 · GHSA-qrh2-rvwq-hh4j

LOW 26

Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01048 Published 2021-11-30 Fixed in 1.3 CWE-918

TI-2021-14690 CVE-2021-36326 · GHSA-gxxj-4c9f-hrvw

LOW 31

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0122 Published 2021-11-30 Fixed in 1.3 CWE-757