CVE-2024-29174

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 26, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-291755.9Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerabilityCVE-2024-291768.8Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacCVE-2024-291772.7Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive informatiCVE-2024-291788.8On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The CVE-2024-291794.8phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges canCVE-2024-29183.6Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM CVE-2024-291807.5Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL CVE-2024-291813.5Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the collCVE-2024-291826.1Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in CollaCVE-2024-291836.1OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a reCVE-2024-291848.0FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting (XSS) vulnerability has been identified within the SiCVE-2024-291859.0FreeScout is a self-hosted help desk and shared mailbox. Versions prior to 1.8.128 are vulnerable to OS Command Injection in the /public/too