{"id":"CVE-2020-36530","aliases":["EUVD-2020-24007","GHSA-5qgf-rhj8-4jj5"],"status":"published","title":"SevOne Network Management System Alert Summary sql injection","description":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00833,"percentile":0.58086,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2022-06-03T19:10:39Z","modified":"2026-06-17T03:15:40Z","products":[{"vendor":"ibm","product":"sevone_network_performance_management"},{"vendor":"sevone","product":"network management system"}],"references":[{"url":"http://seclists.org/fulldisclosure/2020/Oct/5","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://vuldb.com/?id.162262","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36530"},{"url":"https://github.com/advisories/GHSA-5qgf-rhj8-4jj5"}],"sources":{"cve":[{"id":"CVE-2020-36530","title":"SevOne Network Management System Alert Summary sql injection","description":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.","status":"published","published":"2022-06-03T19:10:39Z","modified":"2025-04-15T14:36:15.656Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-24007","description":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.","status":"published","published":"2022-06-03T19:10:39Z","modified":"2025-04-15T14:36:15Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:28.823587Z"}],"ghsa":[{"id":"GHSA-5qgf-rhj8-4jj5","title":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2...","description":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.","status":"published","published":"2022-06-08T00:00:41Z","modified":"2023-01-27T05:04:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:42:23.117332Z"}],"nvd":[{"id":"CVE-2020-36530","description":"A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.","status":"published","published":"2022-06-07T18:15:10.78Z","modified":"2026-06-17T03:15:40.07Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}