VULNERABILITY INTELLIGENCE
CVE-2020-8574
CVSS score7.8 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2020-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security-alert@netapp.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory