Huawei Gaussdb 200 vulnerabilities

3 CVEs affecting Huawei Gaussdb 200, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1790, published 2020-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1811, published 2020-02-18. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending…
CVE-2020-1790, published 2020-02-18. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate…
CVE-2020-1853, published 2020-02-17. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific…