CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-12113

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 65.5%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

https://jira.onap.org/browse/OJSI-43
https://jira.onap.org/browse/OJSI-43

Products affected by CVE-2019-12113

Onap » Open Network Automation Platform » Version: N/A

cpe:2.3:a:onap:open_network_automation_platform:-
Onap » Open Network Automation Platform » Version: 3.0.0

cpe:2.3:a:onap:open_network_automation_platform:3.0.0
Onap » Open Network Automation Platform » Version: 3.0.1

cpe:2.3:a:onap:open_network_automation_platform:3.0.1
Onap » Open Network Automation Platform » Version: 3.0.2

cpe:2.3:a:onap:open_network_automation_platform:3.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12113

Products

Pricing

Contact Us