Lucene search
K

CVE-2020-9353

🗓️ 23 Feb 2020 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 101 Views🌐 WEB

An issue in SmartClient 12.0 allows unauthenticated Local File Inclusion via RPC loadFile

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
CNVD
SmartClient Local File Inclusion Vulnerability
24 Feb 202000:00
cnvd
Cvelist
CVE-2020-9353
23 Feb 202000:00
cvelist
NVD
CVE-2020-9353
23 Feb 202002:15
nvd
Prion
Directory traversal
23 Feb 202002:15
prion
Positive Technologies
PT-2020-20607 · Isomorphic · Smartclient
23 Feb 202000:00
ptsecurity
RedhatCVE
CVE-2020-9353
22 May 202517:34
redhatcve
NVD
ParameterPositionPathDescriptionCWE
_transactionrequest body/tools/developerConsoleOperations.jspUnauthenticated local file inclusion via _transaction parameter containing elem XML in SmartClient RPC loadFile for developer console.CWE-22
_transactionrequest body/isomorphic/IDACallUnauthenticated local file inclusion via _transaction parameter containing elem XML in SmartClient RPC loadFile for developer console.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:40Current
7.7High risk
Vulners AI Score7.7
CVSS 25
CVSS 3.17.5
EPSS0.00822
101