CVE-2026-79858: CVE-2026-79858: SQL enjeksiyonu

Açıklama (NVD)

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,53 (yüzdelik 45)

CWE

CWE-89

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• support.hpe.com
• CWE-89