Vulnerabilities

TI-2024-38466 CVE-2024-58387 · GHSA-9frq-682f-p456

Inspur HCM Cloud Arbitrary File Read via file/download Endpoint

HIGH 77

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path par…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00554 Published 2026-09-30 No fix listed CWE-22

TI-2021-08821 CVE-2021-27285 · GHSA-6p8q-94vc-wgp9

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain…

HIGH 72

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00352 Published 2025-01-06 No fix listed CWE-276

TI-2020-14015 CVE-2020-21224 · GHSA-h24g-qx52-8pp4

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0.

HIGH 69

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.38745 Published 2021-02-22 No fix listed CWE-88

TI-2020-15964 CVE-2020-26122 · GHSA-jvrj-mg4m-mpx3

Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution…

LOW 34

Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01214 Published 2020-12-07 No fix listed CWE-347

Vulnerabilities

Filters

Inspur HCM Cloud Arbitrary File Read via file/download Endpoint

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain…

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0.

Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution…