{"id":"CVE-2024-33335","aliases":["EUVD-2024-31077","GHSA-rcq4-qh6m-j28q"],"status":"published","title":"SQL Injection vulnerability in H3C SeaSQL DWS v.2.0 allows a remote attacker to execute arbitrary...","description":"SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00529,"percentile":0.45049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-06-20T00:00:00Z","modified":"2026-06-17T07:31:40Z","products":[{"vendor":"h3c","product":"seasql_dws"}],"references":[{"url":"https://www.h3c.com/cn/","tags":["x_transferred"]},{"url":"https://gist.github.com/vrhappy/08cb4c8721eed8a74fe786ecdff1ec1e","tags":["x_transferred"]},{"url":"https://www.h3c.com/cn/Service/Online_Help/psirt/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33335"},{"url":"https://www.h3c.com/cn"},{"url":"https://www.h3c.com/cn/Service/Online_Help/psirt"},{"url":"https://github.com/advisories/GHSA-rcq4-qh6m-j28q"}],"sources":{"cve":[{"id":"CVE-2024-33335","description":"SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.","status":"published","published":"2024-06-20T00:00:00Z","modified":"2024-08-02T02:27:53.563Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-31077","description":"SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.","status":"published","published":"2024-06-20T00:00:00Z","modified":"2024-08-02T02:27:53Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:50:22.469918Z"}],"ghsa":[{"id":"GHSA-rcq4-qh6m-j28q","title":"SQL Injection vulnerability in H3C SeaSQL DWS v.2.0 allows a remote attacker to execute arbitrary...","description":"SQL Injection vulnerability in H3C SeaSQL DWS v.2.0 allows a remote attacker to execute arbitrary code via a crafted file.","status":"published","published":"2024-06-20T18:34:09Z","modified":"2024-07-03T18:46:15Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:57:37.660934Z"}],"nvd":[{"id":"CVE-2024-33335","description":"SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.","status":"published","published":"2024-06-20T17:15:50.82Z","modified":"2026-06-17T07:31:40.64Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:07.173605Z"}]}}