Description
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command (-SQL Injection-) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS 6.5EPSS 0.219%Risk 0.66
View source- Published
- 2026-08-26 20:17:52
- Affected versions
- <=20.2
- Type
- Critical software
- Last modified
- 2026-08-28 15:29:44
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N