reporting application
by Arista
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-9134 | Hig | 0.54 | 8.3 | 0.01 | Jan 10, 2025 | Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges. | ||
| CVE-2024-47520 | Hig | 0.49 | 7.6 | 0.00 | Jan 10, 2025 | A user with advanced report application access rights can perform actions for which they are not authorized |
- risk 0.54cvss 8.3epss 0.01
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
- risk 0.49cvss 7.6epss 0.00
A user with advanced report application access rights can perform actions for which they are not authorized