Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-92453
HistoryNov 12, 2021 - 12:00 a.m.

Dell EMC iDRAC9 SQL Injection Vulnerability

2021-11-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

35.1%

DELL Dell EMC iDRAC9 is an American Dell (DELL) company’s set of hardware and software system management solutions. Dell EMC iDRAC9 4.40.00.00 and earlier versions contain a SQL injection vulnerability that can be exploited by an attacker with low privileges to cause information disclosure or denial of service by providing specially crafted input data to the affected application.

CPENameOperatorVersion
DELL Dell EMC iDRAC9 <=4.eq40.00.00

0.001 Low

EPSS

Percentile

35.1%