Known vulnerabilities in ManageOne

Vendor: Huawei
Software: ManageOne
Software CPE: cpe:2.3:a:huawei:manageone:*:*:*:*:*:*:*:*
Website: https://www.huawei.com
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ManageOne ManageOne is affected by 14 known vulnerabilities: 3 medium, 11 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57583 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-37131		 CWE-94 Low
No
No
 8.0.2 21.10.2021 SB2021102125
#VU57582 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-22340		 CWE-362 Low
No
No
 8.0.2 21.10.2021 SB2021102124
#VU54879 - Permissions, Privileges, and Access Controls
CVE-2021-22397		 CWE-264 Low
No
No
 8.0.2 15.07.2021 SB2021071505
#VU52785 - Business Logic Errors (3.0)
CVE-2021-22409		 CWE-840 Low
No
No
 8.0.2 03.05.2021 SB2021042901
#VU52728 - Improper input validation
CVE-2021-22339		 CWE-20 Low
No
No
 8.0.2 29.04.2021 SB2021042901
#VU50908 - Permissions, Privileges, and Access Controls
CVE-2021-22314		 CWE-264 Low
No
No
 8.0.0 24.02.2021 SB2021022408
#VU50284 - Incorrect Privilege Assignment
CVE-2021-22311		 CWE-266 Low
No
No
 8.0.2 03.02.2021 SB2021011803
#VU50086 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-9205		 CWE-94 Low
No
No
 8.0.2 28.01.2021 SB2021011803
#VU49879 - Permissions, Privileges, and Access Controls
CVE-2021-22299		 CWE-264 Low
No
No
 8.0.2 20.01.2021 SB20210120101
#VU49858 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22293		 CWE-444 Medium
No
No
 8.0.1 20.01.2021 SB2021012092
#VU49563 - Improper input validation
CVE-2021-22298		 CWE-20 Medium
No
No
 8.0.2 18.01.2021 SB2021011803
SB2021052719
#VU48654 - Command injection
CVE-2020-9115		 CWE-77 Low
No
No
 8.0.2 25.11.2020 SB2020112509
#VU26211 - Double Free
CVE-2020-1862		 CWE-415 Low
No
No
 6.5.1 19.03.2020 SB2020031905
#VU22790 - Memory corruption
CVE-2019-5289		 CWE-119 Medium
No
No
 6.5.1 15.11.2019 SB2019111506