{"id":"CVE-2020-36531","aliases":["EUVD-2020-24008","GHSA-wx87-pj46-74f6"],"status":"published","title":"SevOne Network Management System Device Manager Page injection","description":"A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00842,"percentile":0.58413,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1236","CWE-74"],"published":"2022-06-03T19:10:41Z","modified":"2026-06-17T03:15:40Z","products":[{"vendor":"ibm","product":"sevone_network_performance_management"},{"vendor":"sevone","product":"network management system"}],"references":[{"url":"http://seclists.org/fulldisclosure/2020/Oct/5","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://vuldb.com/?id.162263","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36531"},{"url":"https://github.com/advisories/GHSA-wx87-pj46-74f6"}],"sources":{"cve":[{"id":"CVE-2020-36531","title":"SevOne Network Management System Device Manager Page injection","description":"A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.","status":"published","published":"2022-06-03T19:10:41Z","modified":"2025-04-15T14:36:06.194Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:35:55.128961Z"}],"euvd":[{"id":"EUVD-2020-24008","description":"A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.","status":"published","published":"2022-06-03T19:10:41Z","modified":"2025-04-15T14:36:06Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:28.823587Z"}],"ghsa":[{"id":"GHSA-wx87-pj46-74f6","title":"A vulnerability, which was classified as critical, has been found in SevOne Network Management...","description":"A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.","status":"published","published":"2022-06-08T00:00:41Z","modified":"2023-01-27T05:03:46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1236"],"updated_at":"2026-11-02T14:42:18.839693Z"}],"nvd":[{"id":"CVE-2020-36531","description":"A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.","status":"published","published":"2022-06-07T18:15:10.843Z","modified":"2026-06-17T03:15:40.247Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-74","CWE-1236"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}