What’s Vulnerable › Vulnerabilities

CVE-2020-24625

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-23 · updated 2026-06-17
• Weakness: CWE-22

Description

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Affected products

• HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter: 1.9

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us

Get alerted when CVE-2020-24625 or the next vulnerability affects your stack