127 matches found
CVE-2025-23377
Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...
Dell Data Lakehouse SQL Injection Vulnerability
Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 are vulnerable to a SQL injection vulnerability that stems from the inclusion of a SQL injection flaw that can be exploited by an unauthenticated attacker to cause an informati...
CVE-2024-47481
Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2024-47483
Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-47481
Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2024-47483
Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-47483
Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-47483
CVE-2024-47483 affects Dell Data Lakehouse versions 1.0.0.0–1.1.0.0 . A vulnerability in SQL injection arises from improper neutralization of SQL elements, allowing an unauthenticated, locally present attacker to cause information disclosure . The connected PT-2024-32632 entry notes a remediation...
CVE-2024-47481
Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2024-47481
Dell Data Lakehouse vulnerable component: versions 1.0.0.0 and 1.1.0.0 suffer from Improper Access Control, resulting in potential Denial of Service when accessed by an unauthenticated attacker on an adjacent network. The connected sources (NVD/CNNVD) confirm the issue and list the affected versi...
CVE-2024-47481
Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...
Dell Data Lakehouse SQL注入漏洞
Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 are vulnerable to a SQL injection vulnerability that stems from the inclusion of a SQL injection flaw that can be exploited by an unauthenticated attacker to cause an informati...
Dell Data Lakehouse 访问控制错误漏洞
Dell Data Lakehouse is a fully integrated data platform from Dell USA Inc. An access control error vulnerability exists in Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0, which stems from the inclusion of an Improper Access Control Vulnerability, which could be exploited by an unauthenticated...
PT-2024-32632 · Dell · Dell Data Lakehouse
Name of the Vulnerable Software and Affected Versions: Dell Data Lakehouse versions 1.0.0.0 through 1.1.0.0 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection. This could allow an unauthenticated attacker with...
The vulnerability of the SQL engine of the Dell Data Analytics Engine (DDAE) in the Dell Data Lakehouse data storage platform allows a hacker to disclose protected information.
The vulnerability of the SQL engine of the Dell Data Analytics Engine DDAE in the Dell Data Lakehouse data storage platform is related to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Dell Data Lakehouse Encryption Issues Vulnerabilities
Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. An encryption issue vulnerability exists in Dell Data Lakehouse version 1.0.0.0, which stems from a missing encryption of sensitive data contained in the DDAE. An attacker could exploit this vulnerability to cause information...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
CVE-2024-38302 affects Dell Data Lakehouse 1.0.0.0, with a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst). A low-privileged attacker with adjacent network access could cause information disclosure. The connected sources provide this vulnerability detail but do not incl...