CVE-2021-36334

Summary: CVE-2021-36334 affects Dell EMC CloudLink (7.1 and earlier). The vulnerability is a CSV formula injection in CloudLink, enabling a remote attacker with high privileges to potentially achieve arbitrary code execution on end-user machines. What’s affected: Dell EMC CloudLink 7.1 and earlie...

CVE-2021-36314

Dell EMC CloudLink 7.1 and earlier versions contain an Arbitrary File Creation vulnerability that can allow a remote unauthenticated attacker to execute arbitrary files on the end user system. The issue is documented in CVE-2021-36314, with CVSSv3.1 base score up to 9.8 (CRITICAL) and CVSSv2 base...

CVE-2021-36332

CVE-2021-36332 affects Dell EMC CloudLink 7.1 and earlier. The issue is a HTML/JavaScript injection (input validation) vulnerability that could be exploited remotely by a low-privilege attacker to redirect end users to arbitrary or malicious websites. Multiple connected sources corroborate the vu...

CVE-2021-36335

CVE-2021-36335 affects Dell EMC CloudLink 7.1 and earlier. The issue is an improper input validation vulnerability in CloudLink, allowing a remote low-privilege attacker to potentially execute arbitrary files on the server. Affected component is the input processing/validation path (no product ve...

CVE-2021-36333

Dell EMC CloudLink CVE-2021-36333 affects CloudLink 7.1 and earlier. It is described as a local, low-privilege buffer overflow vulnerability that can cause an application crash. Root cause identified as a buffer overflow; impact is partial availability disruption. Connected advisories confirm tha...