Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2020-36947

Good to know:

icon

Date: January 27, 2026

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.

Severity Score

Related Resources (8)

https://www.librenms.org
https://www.vulncheck.com/advisories/librenms-mac-accounting-graph-authenticated-sql-injection
https://nvd.nist.gov/vuln/detail/CVE-2020-36947
https://community.librenms.org/
https://github.com/librenms/librenms
https://www.exploit-db.com/exploits/49246
https://community.librenms.org
https://www.mend.io/vulnerability-database/CVE-2020-36947

Severity Score

Weakness Type (CWE)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-89

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us