VYPR

GaussDB 200

by Huawei

CVEs (2)

  • CVE-2020-1790HigFeb 18, 2020
    risk 0.57cvss 8.8epss 0.01

    GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain…

  • CVE-2020-1811HigFeb 18, 2020
    risk 0.57cvss 8.8epss 0.01

    GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker…