CVE-2020-24626

2020-09-2312:41:19

hpe

www.cve.org

9.9 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.1%

JSON

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

CNA Affected

[
  {
    "product": "HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.9"
      }
    ]
  }
]