CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.6. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-12147
Severity
MEDIUM
CVSS
6.6
EPSS
1.52%
Original NVD Description
In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing.
Related CVEs
Other vulnerabilities affecting the same vendor(s)