Huawei Campusinsight vulnerabilities

3 CVEs affecting Huawei Campusinsight, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22293, published 2021-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22293, published 2021-02-06. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include:…
CVE-2019-5278, published 2019-12-13. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can…
CVE-2020-1862, published 2020-03-20. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful…