Lucene search
+L

25 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:56 a.m.•25 views

CVE-2020-12684

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

9.8CVSS8.6AI score0.01121EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-3785

Malware in sbrugna...

9.1CVSS8.4AI score0.02091EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-4980

Malware in sbrugna...

9.8CVSS8.6AI score0.01121EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 5:24 p.m.•14 views

CVE-2020-11431

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal...

9.1CVSS8.5AI score0.02091EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/09 6:15 p.m.•21 views

CVE-2020-28150

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

6.1CVSS6.4AI score0.00905EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/09 6:15 p.m.•27 views

CVE-2020-28150

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

6.1CVSS0.00905EPSS
SaveExploits1References1
CVE
CVE
•added 2021/03/09 5:53 p.m.•81 views

CVE-2020-28150

CVE-2020-28150 affects I-Net Software Clear Reports 20.10.136 Web application. The vulnerability arises because a user-controlled input is used to specify a link to an external site and is subsequently used in a Redirect, enabling possible open-redirect behavior. Root cause: untrusted input used ...

6.1CVSS6.2AI score0.00905EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/03/09 5:53 p.m.•42 views

CVE-2020-28150

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

6.3AI score0.00905EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•8 views

CVE-2020-28150: URL Redirection to Untrusted Site

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

6.1CVSS5.8AI score0.00905EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•6 views

PT-2021-11452

Name of the Vulnerable Software and Affected Versions: I-Net Software Clear Reports version 20.10.136 Description: The issue concerns the web application's acceptance of user-controlled input that specifies a link to an external site. This input is then used in a Redirect, potentially allowing fo...

6.1CVSS0.00905EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•25 views

I-Net Software Clear Reports: Vulnerability in input validation

I-net Software I-net software Clear Reports is a Java-based cross-platform reporting application from the German company I-net software I-net Software. The program supports the output of reports in PDF, HTML, PS and RTF formats. A security vulnerability exists in I-Net Software Clear Reports...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/07/15 8:15 p.m.•19 views

CVE-2020-12684

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

9.8CVSS7.3AI score0.01121EPSS
SaveExploits0References2
NVD
NVD
•added 2020/07/15 8:15 p.m.•34 views

CVE-2020-12684

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

9.8CVSS0.01121EPSS
SaveExploits0References2
Prion
Prion
•added 2020/07/15 8:15 p.m.•27 views

Sql injection

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

7.5CVSS9.4AI score0.01121EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/15 7:09 p.m.•45 views

CVE-2020-12684

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

9.6AI score0.01121EPSS
SaveExploits0References2
CVE
CVE
•added 2020/07/15 7:09 p.m.•59 views

CVE-2020-12684

CVE-2020-12684 describes an XML External Entity (XXE) injection in i-net Clear Reports 2019, version 19.0.287 (Designer), used with i-net HelpDesk and related products. The vulnerability arises when XML input containing a reference to an external entity is processed by a weakly configured XML par...

9.8CVSS9.4AI score0.01121EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•10 views

CVE-2020-12684: Improper Restriction of XML External Entity Reference

XXE injection can occur in i-net Clear Reports 2019 19.0.287 Designer, as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser...

9.8CVSS5.8AI score0.01121EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/15 12:00 a.m.•7 views

PT-2020-13203

Name of the Vulnerable Software and Affected Versions i-net Clear Reports versions 19.0.287 Description The issue occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser, allowing XXE injection. This can happen in i-net Clear Reports 2019,...

9.8CVSS0.01121EPSS
SaveExploits0References5
NVD
NVD
•added 2020/05/07 5:15 p.m.•35 views

CVE-2020-11431

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal...

9.1CVSS9.1AI score0.02091EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2020/05/07 5:15 p.m.•16 views

CVE-2020-11431

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal...

9.1CVSS5.9AI score0.02091EPSS
SaveExploits0References4
Rows per page
Query Builder