cbcvebase.

Inspur Haiyue Hcm Cloud vulnerabilities

1 known vulnerability affecting inspur/haiyue_hcm_cloud.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-58387P1HIGHCVSS 7.5Exploitedv*2026-09-30
CVE-2024-58387 [HIGH] CWE-22 CVE-2024-58387: Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/ Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as /api/model_report/file/download?index=/&ext= to traverse the filesystem an
nvd
Inspur Haiyue Hcm Cloud vulnerabilities | cvebase