Lucene search

K
cveMitreCVE-2024-33335
HistoryJun 20, 2024 - 5:15 p.m.

CVE-2024-33335

2024-06-2017:15:50
CWE-94
mitre
web.nvd.nist.gov
27
cve-2024-33335
remote attacker
arbitrary code
crafted file
h3c seasql dws

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

8.2

Confidence

Low

EPSS

0

Percentile

15.6%

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

8.2

Confidence

Low

EPSS

0

Percentile

15.6%

Related for CVE-2024-33335