CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability

published February 18, 2020

CVSS
—
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01093 · 65.2th percentile
Published
2020-02-18T02:07Z
EPSS history
Timeline
  • 18 FEB 02:07Z
    GaussDB 200 with version of 6.5.1 have a command injection vulnerability
    cvelistv5