What is CVE-2020-9205?

CVE-2020-9205 is a medium-severity vulnerability in Huawei Manageone, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 4.9/10. Published 2021-02-06.

How severe is CVE-2020-9205?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Huawei Manageone

CVE-2020-9205

There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the atta…

EPSS: 0.006 (45.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Huawei Manageone — versions 8.0.1
N/a Manageone — versions 8.0.1

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9205?: CVE-2020-9205 is a medium-severity vulnerability in Huawei Manageone, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 4.9/10. Published 2021-02-06.
How severe is CVE-2020-9205?: Medium severity. CVSS v3 base score is 4.9 out of 10.