What’s Vulnerable › Vulnerabilities

CVE-2020-24626

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-23 · updated 2026-06-17
• Weakness: CWE-22

Description

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Affected products

• HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter: 1.9

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us

Get alerted when CVE-2020-24626 or the next vulnerability affects your stack