CVEvulnerability
CVE-2020-36530
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.
Affected configurations
• ibm sevone network performance management (>= 5.7.2.0 <= 5.7.2.22)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://seclists.org/fulldisclosure/2020/Oct/5 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.162262 Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Oct/5 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.162262 Third Party Advisory, VDB Entry