Lucene search
+L

3 matches found

OSV
OSV
added 2020/11/05 7:15 p.m.8 views

CVE-2020-12147

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing...

8.8CVSS7.3AI score0.01521EPSS
SaveExploits1References1
CVE
CVE
added 2020/11/05 6:50 p.m.53 views

CVE-2020-12147

CVE-2020-12147 affects Silver Peak Unity Orchestrator. An authenticated user can issue unauthorized MySQL queries against the Orchestrator database through the /sqlExecution REST API. Affected versions: prior to 8.9.11+, 8.10.11+, or 9.0.1+. Documentation notes that patches are available to remed...

8.8CVSS7.4AI score0.01521EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/05 6:50 p.m.30 views

CVE-2020-12147 Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing...

6.6CVSS8.5AI score0.01521EPSS
SaveExploits1References1
Rows per page
Query Builder