CVE-2023-44284

Summary

CVE-2023-44284 is a newly disclosed SQL Injection vulnerability affecting Dell PowerProtect Data Domain versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110. This issue allows a remote, low-privileged attacker to execute malicious SQL commands on the application's backend database, potentially granting unauthorized read access to sensitive application data. This vulnerability can pose a significant risk to data security, making it crucial for users to update their systems as soon as patches become available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.