CVE-2020-24623

Опубликовано: 18 сент. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 3.3

EPSS Низкий

Описание

A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exploited to allow SQL injection in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD).

Ссылки

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04024en_us
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1208/
Third Party Advisory
VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04024en_us
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1208/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hpe:universal_api_framework:*:*:*:*:*:microsoft_hyper-v:*:*

Версия до 2.5.2 (исключая)

cpe:2.3:a:hpe:universal_api_framework:*:*:*:*:*:vmware_esxi:*:*

Версия до 2.5.2 (исключая)

EPSS

Процентиль: 35%

0.00148

Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-pwj8-9qvg-5p8c

github

больше 3 лет назад