CVE-2021-36327
Last modified
CVE-2021-36327 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.. EPSS estimates a 1.01% chance of exploitation in the next 30 days.
Description
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Streaming Data Platform | < 1.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-36327?
How severe is CVE-2021-36327?
How do I fix CVE-2021-36327?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36321Dell Networking X-Series firmware versions prior to 3.0.1.8 …7.5
- CVE-2021-36322Dell Networking X-Series firmware versions prior to 3.0.1.8 …6.1
- CVE-2021-36323Dell BIOS contains an improper input validation vulnerabilit…6.7
- CVE-2021-36324Dell BIOS contains an improper input validation vulnerabilit…6.7
- CVE-2021-36325Dell BIOS contains an improper input validation vulnerabilit…6.7
- CVE-2021-36326Dell EMC Streaming Data Platform, versions prior to 1.3 cont…6.5
- CVE-2021-36328Dell EMC Streaming Data Platform versions before 1.3 contain…8.8
- CVE-2021-36329Dell EMC Streaming Data Platform versions before 1.3 contain…6.5
- CVE-2021-3633A DLL preloading vulnerability was reported in Lenovo Driver…7.8
- CVE-2021-36330Dell EMC Streaming Data Platform versions before 1.3 contain…9.8
- CVE-2021-36332Dell EMC CloudLink 7.1 and all prior versions contain a HTML…5.4
- CVE-2021-36333Dell EMC CloudLink 7.1 and all prior versions contain a Buff…5.5
Are you affected by CVE-2021-36327?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST