CVE-2020-36531: SevOne Network Management System Device Manager Page injection
Published Jun 3, 2022
·Updated
A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.
Affected Software
1 affected component
IBM SevOne Network Performance Management>=5.7.2.0<=5.7.2.22
Event History
Jun 3, 2022
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-36531?
CVE-2020-36531 has been classified as a critical vulnerability.
2
What systems are affected by CVE-2020-36531?
CVE-2020-36531 affects the SevOne Network Management System versions up to 5.7.2.22.
3
How do I fix CVE-2020-36531?
To fix CVE-2020-36531, it is recommended to upgrade the SevOne Network Management System to a version newer than 5.7.2.22.
4
What type of attack is CVE-2020-36531 associated with?
CVE-2020-36531 is associated with an injection attack that can lead to privilege escalation.
5
Can CVE-2020-36531 be exploited remotely?
Yes, CVE-2020-36531 can be exploited remotely.