CVE-2024-9678 in DLP Extension

الملخص

بحسب MITRE • 16/12/2024

An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Trellix
• حجز: 09/10/2024
• إفشاء: 16/12/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-288513
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• CVSS: 4.9 (CNA)
• EPSS: 0.00744
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Finance, Chemical, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-9678
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-9678
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-9678/