CVE-2020-11586

2020-04-0621:35:16

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.006

Percentile

79.0%

JSON

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

References

www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/