Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.
| Software | From | Fixed in |
|---|---|---|
| dell / data_domain_operating_system | 7.11.0.0 | 7.13.1.0 |
| dell / data_domain_operating_system | 7.8.0.0 | 7.10.1.30 |
| dell / data_domain_operating_system | - | 7.7.5.40 |