CVE-2020-36530 is a vulnerability in IBM Sevone Network Performance Management
Published on June 7, 2022

SevOne Network Management System Alert Summary sql injection
A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.

NVD

A proof of concept, or POC exists for this vulnerability.

Vulnerability Analysis

CVE-2020-36530 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2020-36530. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Exploitation:

POC

Automatable:

Technical Impact:

PARTIAL

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

LOW

Weakness Type

What is a SQL Injection Vulnerability?

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE-2020-36530 has been classified to as a SQL Injection vulnerability or weakness.

Products Associated with CVE-2020-36530

Want to know whenever a new CVE is published for IBM Sevone Network Performance Management? stack.watch will email you.

IBM Sevone Network Performance Management

Affected Versions

SevOne Network Management System:

Version 5.7.2.0 is affected.
Version 5.7.2.1 is affected.
Version 5.7.2.2 is affected.
Version 5.7.2.3 is affected.
Version 5.7.2.4 is affected.
Version 5.7.2.5 is affected.
Version 5.7.2.6 is affected.
Version 5.7.2.7 is affected.
Version 5.7.2.8 is affected.
Version 5.7.2.9 is affected.
Version 5.7.2.10 is affected.
Version 5.7.2.11 is affected.
Version 5.7.2.12 is affected.
Version 5.7.2.13 is affected.
Version 5.7.2.14 is affected.
Version 5.7.2.15 is affected.
Version 5.7.2.16 is affected.
Version 5.7.2.17 is affected.
Version 5.7.2.18 is affected.
Version 5.7.2.19 is affected.
Version 5.7.2.20 is affected.
Version 5.7.2.21 is affected.
Version 5.7.2.22 is affected.

Exploit Probability

EPSS

0.83%

Percentile

57.88%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.