CVE-2020-25254

2020-09-1102:20:00

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by TestConnection_LocalOrLinkedServer, CreateFilterFriendlyView, or AddWorkViewLinkedServer.

References

seclists.org/fulldisclosure/2020/Oct/9

seclists.org/fulldisclosure/2020/Sep/7