Filtered by vendor Huawei Subscriptions
Filtered by product Gaussdb 200 Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-1853 1 Huawei 1 Gaussdb 200 2024-08-04 6.5 Medium
GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.
CVE-2020-1790 1 Huawei 1 Gaussdb 200 2024-08-04 8.8 High
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.
CVE-2020-1811 1 Huawei 1 Gaussdb 200 2024-08-04 8.8 High
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.