Lucene search

K
cvelistMitreCVELIST:CVE-2020-12259
HistoryMay 18, 2020 - 1:00 p.m.

CVE-2020-12259

2020-05-1813:00:17
mitre
www.cve.org
3

AI Score

6.2

Confidence

High

EPSS

0.163

Percentile

96.0%

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php.

AI Score

6.2

Confidence

High

EPSS

0.163

Percentile

96.0%