CVE-2021-36328
Published: 30 November 2021
Summary
CVE-2021-36328 is a high-severity Use of HTTP Request With Sensitive Query String (CWE-598) vulnerability in Dell Emc Streaming Data Platform. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 40.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-22948
Vulnerability details
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing uses SQL injection payloads against database interfaces, identifying and supporting fixes for SQL injection weaknesses.
Protects sensitive data placed in query strings from interception in transit when confidentiality controls like HTTPS are enforced.
Validates query inputs to prevent SQL syntax or command manipulation.