Vulnerability Details CVE-2024-47977
Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.5%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2024-47977
-
cpe:2.3:a:dell:avamar_server:19.10
-
cpe:2.3:a:dell:avamar_server:19.4
-
cpe:2.3:a:dell:avamar_server:19.7
-
cpe:2.3:a:dell:avamar_server:19.8
-
cpe:2.3:a:dell:avamar_server:19.9
-
cpe:2.3:h:dell:avamar_data_store:gen4t
-
cpe:2.3:h:dell:avamar_data_store:gen5a