CVE-2020-6865

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-30 · updated 2026-06-17
Weakness: CWE-200

Description

ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20.

Affected products

OSCP: 16.19.10, 16.19.20

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012782
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012782

Get alerted when CVE-2020-6865 or the next vulnerability affects your stack