CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-12132

An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

https://jira.onap.org/browse/OJSI-41
https://jira.onap.org/browse/OJSI-41

Products affected by CVE-2019-12132

Onap » Open Network Automation Platform » Version: 3.0.0

cpe:2.3:a:onap:open_network_automation_platform:3.0.0
Onap » Open Network Automation Platform » Version: 3.0.1

cpe:2.3:a:onap:open_network_automation_platform:3.0.1
Onap » Open Network Automation Platform » Version: 3.0.2

cpe:2.3:a:onap:open_network_automation_platform:3.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12132

Products

Pricing

Contact Us