CVE-2020-3973

CVE-2020-3973CVE-2020-3973

arista / velocloud_orchestrator

Description

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Last modified2026-07-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.