Skip to content
OpenAdvisories

Vendor

Inspur

1 known vulnerabilities.

Products

Haiyue HCM Cloud 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-58387

    Inspur HCM Cloud Arbitrary File Read via file/download Endpoint

    Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can cr…

    Inspur Haiyue HCM Cloud