Multiple Blind SQL Injection Vulnerabilities in EMC Data Protection Advisor

CVE-2017-8002 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.