CVE-2020-24623

MEDIUM 6.5CVE-2020-24623 · Published 18/09/2020 · updated 17/06/2026

In short

CVE-2020-24623 is a MEDIUM (CVSS 6.5) vulnerability affecting universal api framework (hpe).
Chance of exploitation in the next 30 days (EPSS): 0.95%, higher than 61.1% of all vulnerabilities.
Fix: update to 2.5.2 or later.

Package	Affected versions	Patched versions
universal api framework hpe	`< 2.5.2`	`2.5.2`

Description

A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exploited to allow SQL injection in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD).

References

support.hpe.com/hpsc/doc/public/display · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-20-1208 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free