CVE-2021-36327CWE-918

Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability

Medium · published November 30, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01048 · 63.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2021-11-30T20:40Z
EPSS history
Timeline
  • 30 NOV 20:40Z
    Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability
    cvelistv5