Lucene search
VulDBCVELIST:CVE-2020-36530HistoryJun 03, 2022 - 7:10 p.m.
CVE-2020-36530 SevOne Network Management System Alert Summary sql injection
2022-06-0319:10:39
CWE-89
VulDB
www.cve.org
5
sevone network management system
alert summary
sql injection
critical vulnerability
remote attack
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
33.4%
A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.
CNA Affected
[
{
"product": "Network Management System",
"vendor": "SevOne",
"versions": [
{
"status": "affected",
"version": "5.7.2.0"
},
{
"status": "affected",
"version": "5.7.2.1"
},
{
"status": "affected",
"version": "5.7.2.2"
},
{
"status": "affected",
"version": "5.7.2.3"
},
{
"status": "affected",
"version": "5.7.2.4"
},
{
"status": "affected",
"version": "5.7.2.5"
},
{
"status": "affected",
"version": "5.7.2.6"
},
{
"status": "affected",
"version": "5.7.2.7"
},
{
"status": "affected",
"version": "5.7.2.8"
},
{
"status": "affected",
"version": "5.7.2.9"
},
{
"status": "affected",
"version": "5.7.2.10"
},
{
"status": "affected",
"version": "5.7.2.11"
},
{
"status": "affected",
"version": "5.7.2.12"
},
{
"status": "affected",
"version": "5.7.2.13"
},
{
"status": "affected",
"version": "5.7.2.14"
},
{
"status": "affected",
"version": "5.7.2.15"
},
{
"status": "affected",
"version": "5.7.2.16"
},
{
"status": "affected",
"version": "5.7.2.17"
},
{
"status": "affected",
"version": "5.7.2.18"
},
{
"status": "affected",
"version": "5.7.2.19"
},
{
"status": "affected",
"version": "5.7.2.20"
},
{
"status": "affected",
"version": "5.7.2.21"
},
{
"status": "affected",
"version": "5.7.2.22"
}
]
}
]Related
nvd
nvd
CVE-2020-36530
2022-06-07 18:15:10
cnvd
cnvd
SevOne Network Management System SQL Injection Vulnerability
2022-06-09 00:00:00
prion
prion
Sql injection
2022-06-07 18:15:00
cve
cve
CVE-2020-36530
2022-06-07 18:15:10
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
33.4%
Related for CVELIST:CVE-2020-36530