Lucene search

K
cve[email protected]CVE-2024-33335
HistoryJun 20, 2024 - 5:15 p.m.

CVE-2024-33335

2024-06-2017:15:50
CWE-94
web.nvd.nist.gov
25
cve-2024-33335
remote attacker
arbitrary code
crafted file
h3c seasql dws

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

Related for CVE-2024-33335