CVE-2021-22298
Estado: ModificadaMedia (6.5)—
There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.91%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-22298",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "n/a",
"product": "ManageOne",
"versions": [
{
"status": "affected",
"version": "6.5.1.1.B020,6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090"
}
]
}
]
}
],
"published": "2021-02-06T02:15:12.603",
"references": [
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2022.html",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2022.html",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090."
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad de lógica en el producto Huawei Gauss100 OLTP. Un atacante con determinados permisos podría llevar a cabo una sentencia SQL específica para explotar esta vulnerabilidad. Debido a un diseño de seguridad insuficiente, una explotación con éxito puede causar un servicio anormal. Las versiones del producto afectadas incluyen: ManageOne versiones 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5 .1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200 .B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090"
}
],
"lastModified": "2026-06-17T03:36:57.467",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4042FC49-4FC7-46B4-8D14-ECACF22A9860"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4D8799F-9ADD-442F-BC39-4BCAFBFFBE2B"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "535597A4-29C8-44A8-9008-4F4E10030531"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b070:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43839F73-570C-47F7-863C-1648884423FD"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b080:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "186BE073-131F-4B46-BD3D-A2BFEE1B8B2E"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b040:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22A7E167-9739-49D4-9A77-AF1AF9A078E8"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b050:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9BC229B-6867-4FEA-925B-6B01AFC0301F"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b060:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1B4DD08-EF8C-4E20-9940-13A7F2E33405"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b070:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74918254-E81D-4F4A-AB43-6A47B04D9670"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b080:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FC764B8-9EDA-44B8-9879-125FB2CBAAB0"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b090:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9E37AAA-C721-4BE9-9BF3-26D6ECC2EE6B"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C59C64B0-D42D-4515-BD2B-4FE5C7F48BE6"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "698B071C-FC52-40CD-BBA7-53426051F504"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6461FE1-99CC-48E4-8134-F17D895511F0"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE5AE38A-627F-4337-949D-A5811D6859EB"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29FEC933-0E52-496B-A2B3-C84E65E5B430"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F30BF5-4510-4AC7-8B12-6D4126C2DC60"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37090D37-0CDF-464B-9509-4F465D20C8C2"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83B2B033-F12C-487E-8245-3F5BBF59BBC1"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ADF4433-A950-4A00-A4F7-12F766B4C947"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FF3EB4D-6892-4572-B1D6-6183FE8B8D66"
},
{
"criteria": "cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C07C03B-18BA-4EA3-A73F-3E6E839252F0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@huawei.com"
}