Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7577

Опубликовано: 14 июл. 2020
Источник: nvd
CVSS3: 8.1
CVSS2: 5.5
EPSS Низкий

Описание

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:opcenter_execution_core:*:*:*:*:*:*:*:*
Версия до 8.2 (исключая)

EPSS

Процентиль: 74%
0.00798
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-89
CWE-89

Связанные уязвимости

github
больше 3 лет назад

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.

EPSS

Процентиль: 74%
0.00798
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-89
CWE-89