VULNERABILITY INTELLIGENCE

CVE-2024-29174

CVSS score4.4 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2024-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.

Weakness classification

  • security_alert@emc.com: CWE-89

Primary references