VULNERABILITY INTELLIGENCE

CVE-2020-24626

CVSS score9.8 CRITICAL
EPSS probability3.04%
CISA KEVNot currently listed
Published2020-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references