Search vulnerabilities

Results 3

Export CSV
CVE-2020-24626

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Hpe
CVE-2020-24625

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Hpe
CVE-2020-24624

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Hpe