Lucene search
MitreCVELIST:CVE-2020-11885HistoryApr 17, 2020 - 7:14 p.m.
CVE-2020-11885
2020-04-1719:14:03
mitre
www.cve.org
4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L
0.001 Low
EPSS
Percentile
42.8%
WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file.
Related
prion
prion
Design/Logic Flaw
2020-04-17 20:15:00
nvd
nvd
CVE-2020-11885
2020-04-17 20:15:12
cve
cve
CVE-2020-11885
2020-04-17 20:15:12
4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L
0.001 Low
EPSS
Percentile
42.8%
Related for CVELIST:CVE-2020-11885