Known vulnerabilities in CloudLink

Vendor: Dell
Software: CloudLink
Software CPE: cpe:2.3:a:dell:cloudlink:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 42
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CloudLink CloudLink is affected by 42 known vulnerabilities: 13 high, 15 medium, 14 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79812 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-28082		 CWE-327 Medium
No
No
 7.1.3 22.08.2023 SB2023082202
#VU75568 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-14900		 CWE-89 Medium
No
No
 8.0-3.10.5.1 28.04.2023 SB2020070614
SB2023042803
SB2021040765
and 3 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-10172		 CWE-611 Medium
No
No
 8.0-3.10.5.1 21.07.2022 SB2022072128
SB2021021828
SB2023042803
and 18 more
#VU60986 - Improper input validation
CVE-2020-28491		 CWE-20 Medium
No
No
 8.0-3.10.5.1 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU60208 - Improper input validation
CVE-2021-35043		 CWE-20 Medium
No
No
 8.0-3.10.5.1 01.02.2022 SB2022020144
SB2022020165
SB2022020166
and 4 more
#VU57846 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41973		 CWE-835 Medium
No
No
 8.0-3.10.5.1 01.11.2021 SB2021110114
SB2022042540
SB20230418165
and 4 more
#VU48543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25638		 CWE-89 High
No
No
 8.0-3.10.5.1 19.11.2020 SB2020111901
SB2021050201
SB2021063003
and 8 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 8.0-3.10.5.1 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU28463 - Use of Insufficiently Random Values
CVE-2020-5408		 CWE-330 Medium
No
No
 8.0-3.10.5.1 01.06.2020 SB2020060107
SB2020102832
SB2020102833
and 13 more
#VU27499 - Deserialization of Untrusted Data
CVE-2018-1000613		 CWE-502 Medium
No
No
 8.0-3.10.5.1 04.05.2020 SB2018070915
SB2020050421
SB2018080316
and 5 more
#VU27043 - Improper input validation
CVE-2018-1000180		 CWE-20 Medium
No
No
 8.0-3.10.5.1 21.04.2020 SB2020042107
SB2018092415
SB2021042531
and 17 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10241		 CWE-79 Low
No
No
 8.0-3.10.5.1 23.03.2020 SB2020032710
SB2020072802
SB2020121701
and 14 more
#VU31150 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-3778		 CWE-601 Low
Available
No
 8.0-3.10.5.1 07.03.2019 SB2019030715
SB2023042803
#VU15466 - Permissions, Privileges, and Access Controls
CVE-2018-15758		 CWE-264 Low
No
No
 8.0-3.10.5.1 22.10.2018 SB2018102304
SB2019080913
SB2023042803
#VU13528 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7657		 CWE-200 Low
No
No
 8.0-3.10.5.1 02.07.2018 SB2018070205
SB2018082001
SB2022040632
and 18 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656		 CWE-444 Low
No
No
 8.0-3.10.5.1 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more
#VU12919 - Improper input validation
CVE-2018-1260		 CWE-20 High
No
No
 8.0-3.10.5.1 22.05.2018 SB2018051507
SB2023042803
#VU9750 - Exposure of sensitive information to an unauthorized actor
CVE-2017-13098		 CWE-200 Low
Available
No
 8.0-3.10.5.1 22.12.2017 SB2017121312
SB2020050421
SB2018072803
and 5 more
#VU9654 - Information Exposure Through Timing Discrepancy
CVE-2017-9735		 CWE-208 Low
No
No
 8.0-3.10.5.1 17.06.2017 SB2017061704
SB2021072132
SB2023042803
and 12 more
#VU38945 - Data Handling
CVE-2016-4977		 CWE-19 High
No
No
 8.0-3.10.5.1 25.05.2017 SB2017052520
SB2023042803


Showing elements 1 - 20 out of 42