10
CVE-2020-24649
- EPSS 0.8%
- Veröffentlicht 19.10.2020 18:15:14
- Zuletzt bearbeitet 21.11.2024 05:15:21
- Quelle security-alert@hpe.com
- Teams Watchlist Login
- Unerledigt Login
A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Intelligent Management Center Version < 7.3
Hp ≫ Intelligent Management Center Version7.3 Update-
Hp ≫ Intelligent Management Center Version7.3 Updatee0501
Hp ≫ Intelligent Management Center Version7.3 Updatee0503
Hp ≫ Intelligent Management Center Version7.3 Updatee0503p02
Hp ≫ Intelligent Management Center Version7.3 Updatee0504
Hp ≫ Intelligent Management Center Version7.3 Updatee0504p02
Hp ≫ Intelligent Management Center Version7.3 Updatee0504p04
Hp ≫ Intelligent Management Center Version7.3 Updatee0504p2
Hp ≫ Intelligent Management Center Version7.3 Updatee0504p4
Hp ≫ Intelligent Management Center Version7.3 Updatee0506
Hp ≫ Intelligent Management Center Version7.3 Updatee0506p02
Hp ≫ Intelligent Management Center Version7.3 Updatee0506p03
Hp ≫ Intelligent Management Center Version7.3 Updatee0506p07
Hp ≫ Intelligent Management Center Version7.3 Updatee0506p09
Hp ≫ Intelligent Management Center Version7.3 Updatee0605
Hp ≫ Intelligent Management Center Version7.3 Updatee0605h02
Hp ≫ Intelligent Management Center Version7.3 Updatee0605h05
Hp ≫ Intelligent Management Center Version7.3 Updatee0605p04
Hp ≫ Intelligent Management Center Version7.3 Updatee0605p06
Hp ≫ Intelligent Management Center Version7.3 Updatee0705
Hp ≫ Intelligent Management Center Version7.3 Updatee0705p02
Hp ≫ Intelligent Management Center Version7.3 Updatee0705p04
Hp ≫ Intelligent Management Center Version7.3 Updatee0705p06
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.8% | 0.719 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.