CVE-2026-94348: CVE-2026-94348: SQL enjeksiyonu

Açıklama (NVD)

Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.

Özet bilgiler

CVSS v3.1

6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

%0,17 (yüzdelik 6)

CWE

CWE-89

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.dell.com
• CWE-89