CVEvulnerability

CVE-2020-9521

8.8 HIGH Published 2020-03-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-89

Description

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.

Affected configurations

• microfocus service manager automation 2018.02 • microfocus service manager automation 2018.05 • microfocus service manager automation 2018.08 • microfocus service manager automation 2019.02 • microfocus service manager automation 2019.05 • microfocus service manager automation 2019.08

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References