Silver Peak Systems, Inc. Unity Orchestrator
3 CVEs affecting Silver Peak Systems, Inc. Unity Orchestrator. Latest disclosed: 2020-11-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12147 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchest… |
CVE-2020-12146 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the… |
CVE-2020-12145 | Medium | 6.6 | 2020-11-05 | Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it po… |