VULNERABILITY INTELLIGENCE

CVE-2020-24625

CVSS score7.5 HIGH
EPSS probability1.59%
CISA KEVNot currently listed
Published2020-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references