What is CVE-2020-9521?

CVE-2020-9521 is a high-severity vulnerability in Microfocus Service Manager Automation, classified under SQL Injection. CVSS score: 8.8/10. Published 2020-03-26.

How severe is CVE-2020-9521?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Microfocus Service Manager Automation

CVE-2020-9521

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.

Vulnerability class: SQL Injection

EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microfocus Service_manager_automation — versions 2018.02, 2018.05, 2018.08
Micro Focus International - Service Manager Automation (Sma) — versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@opentext.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-9521?: CVE-2020-9521 is a high-severity vulnerability in Microfocus Service Manager Automation, classified under SQL Injection. CVSS score: 8.8/10. Published 2020-03-26.
How severe is CVE-2020-9521?: High severity. CVSS v3 base score is 8.8 out of 10.