CVE-2020-36529

SevOne Network Management System (up to 5.7.2.22) contains a command-injection vulnerability in traceroute.php of the Traceroute Handler. The issue allows remote attackers to achieve privilege escalation through a crafted input, enabling arbitrary command execution. Public references describe rem...

CVE-2020-36530

The CVE-2020-36530 entry concerns SevOne Network Management System (vulnerable up to 5.7.2.22) with a SQL injection affecting the Alert Summary. The vulnerability arises from a manipulation that leads to SQL injection, and exploitation is possible remotely. Connected documents indicate a PoC is a...

CVE-2020-36531

The CVE-2020-36531 entry concerns SevOne Network Management System (NMS) versions up to 5.7.2.22, specifically the Device Manager Page. The connected documents describe a CSV injection vulnerability that can be exploited remotely to escalate privileges. Affected versions are 5.7.2.0–5.7.2.22 (inc...