CVE-2020-9521 - CVE House
Back to Database
Status published High CVE-2020-9521

An SQL injection vulnerability was discovered in Micro Focus Service...

Vulnerability Description

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9521

Credits & Attribution

No credits recorded in the NVD database.

References

More from Micro Focus International

View All →
CVE-2020-9520
A stored XSS vulnerability was discovered in Micro Focus Vibe,...
Medium 5.4
CVE-2020-9519
HTTP methods reveled in Web services vulnerability in Micro Focus...
Medium 5.3
CVE-2020-9518
Login filter can access configuration files vulnerability in Micro Focus...
Medium 5.3
CVE-2020-9517
There is an improper restriction of rendered UI layers or...
Medium 5.4
CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro...
High 7.5

Affected Vendor

Micro Focus International

View all reports →

Affected Software

Micro Focus - Service Manager Automation (SMA)
Vulnerable Versions:
2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02

Timeline

Official Publish: March 26th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.