CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-12112

An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

https://jira.onap.org/browse/OJSI-199
https://jira.onap.org/browse/OJSI-199

Products affected by CVE-2019-12112

Onap » Open Network Automation Platform » Version: 3.0.0

cpe:2.3:a:onap:open_network_automation_platform:3.0.0
Onap » Open Network Automation Platform » Version: 3.0.1

cpe:2.3:a:onap:open_network_automation_platform:3.0.1
Onap » Open Network Automation Platform » Version: 3.0.2

cpe:2.3:a:onap:open_network_automation_platform:3.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12112

Products

Pricing

Contact Us