CVE-2020-26943

CRITICAL Year: 2020
CVSS v3 Score
9.9
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under (because the Python eval function is used). This may result in Horizon host unauthorized access and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected.

Related Vulnerabilities

CVE-2017-10202

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker...

NVD-CWE-Other2017

CVE-2017-10272

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerabil...

NVD-CWE-Other2017

CVE-2017-10352

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12....

NVD-CWE-Other2017

CVE-2017-10396

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). Supported versions that are affected are 2.2.5.0, 2.2.6.0 and 2.2.7...

NVD-CWE-Other2017

CVE-2017-10404

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Easily ex...

NVD-CWE-Other2017

CVE-2017-3503

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that ar...

NVD-CWE-Other2017