Hpe Nonstop Sql Mx Sqlcat
Monthly
Unauthorized command execution in HPE NonStop SQL/MX SQLCAT allows remote attackers to run arbitrary commands through improperly validated input (CWE-20). The CVSS score is 7.4 with a vector indicating low-privileged authenticated access (PR:L), yet the HPE description states an unauthenticated user can exploit it, creating an unresolved contradiction that complicates prioritization. No public exploit code or active exploitation has been identified at time of analysis, and the risk is confined to HPE NonStop environments where the SQLCAT catalog manager is network-accessible.
Unauthorized command execution in HPE NonStop SQL/MX SQLCAT allows remote attackers to run arbitrary commands through improperly validated input (CWE-20). The CVSS score is 7.4 with a vector indicating low-privileged authenticated access (PR:L), yet the HPE description states an unauthenticated user can exploit it, creating an unresolved contradiction that complicates prioritization. No public exploit code or active exploitation has been identified at time of analysis, and the risk is confined to HPE NonStop environments where the SQLCAT catalog manager is network-accessible.