CVE-2020-36530

Опубликовано: 07 июн. 2022

Источник: nvd

CVSS3: 6.3

CVSS3: 8.8

CVSS2: 6

EPSS Низкий

Описание

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.

Ссылки

http://seclists.org/fulldisclosure/2020/Oct/5
Exploit
Mailing List
Third Party Advisory
https://vuldb.com/?id.162262
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Oct/5
Exploit
Mailing List
Third Party Advisory
https://vuldb.com/?id.162262
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:sevone_network_performance_management:*:*:*:*:*:*:*:*

Версия от 5.7.2.0 (включая) до 5.7.2.22 (включая)

EPSS

Процентиль: 45%

0.00229

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-5qgf-rhj8-4jj5

CVSS3: 8.8

github

больше 3 лет назад

EPSS

Процентиль: 45%

0.00229

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-89