CWE-1027 · 2 records
OWASP Top Ten 2017 Category A1 - Injection
CVEs in this class
2 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2021-27021No exploit | A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL querypuppet · puppet · CWE-1027 | High8.8 | — | 1.2% | Jul 20, 2021 |
32Monitor | CVE-2025-59874No exploit | HCL Hive Telco Observability is affected by a Required directives missing from the CSP .hcl · hive · CWE-1027 | High8.1 | — | 0.2% | Jun 4, 2026 |
- CVE-2021-2702135Monitor
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query
HighCVSS 8.8No exploitEPSS 1%puppet · puppetJul 20, 2021
- CVE-2025-5987432Monitor
HCL Hive Telco Observability is affected by a Required directives missing from the CSP .
HighCVSS 8.1No exploitEPSS 0%hcl · hiveJun 4, 2026