Sql injection

2024-03-0420:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

arista edge threat management

reporting application

elevated privileges

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

JSON

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.