← Back

CVE-2021-22298

nvd nist
Published: Feb 6, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.

Affected (22)

Products: Huawei: Manageone
1 product
Manageone
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Huawei
Version 6.5.1.1 b020
Version 6.5.1.1 b030
Version 6.5.1.1 b040
Version 6.5.1.1 rc1.b070
Version 6.5.1.1 rc1.b080
Version 6.5.1.1 rc2.b040
Version 6.5.1.1 rc2.b050
Version 6.5.1.1 rc2.b060
Version 6.5.1.1 rc2.b070
Version 6.5.1.1 rc2.b080
Version 6.5.1.1 rc2.b090
Version 6.5.1.1 spc100.b050
Version 6.5.1.1 spc101.b010
Version 6.5.1.1 spc101.b040
Version 6.5.1.1 spc200.b010
Version 6.5.1.1 spc200.b030
Version 6.5.1.1 spc200.b040
Version 6.5.1.1 spc200.b050
Version 6.5.1.1 spc200.b060
Version 6.5.1.1 spc200.b070
Version 6.5.1.1 spc200
Version 8.0.0

References (4)

Source: psirt@huawei.com
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory

Timeline

No history available yet.