Lucene search

CVE-2020-15366

🗓️ 15 Jul 2020 00:00:00Reported by ubuntu.comType

An issue in Ajv (Another JSON Schema Validator) 6.12.2 allows code execution via crafted JSON schem

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Watson AI Gateway for Cloud Pak for Data is vulnerable to an Ajv (aka Another JSON Schema Validator) could allow a remote attacker to execute arbitrary code on the system (CVE-2020-15366)	30 Jun 202318:37	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-15366 An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.	4 Jun 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	11 Apr 202219:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	20 Jun 202416:51	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties	12 Dec 202317:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Sep 202316:08	–	ibm

Source	Link
github	www.github.com/ajv-validator/ajv/releases/tag/v6.12.3
github	www.github.com/ajv-validator/ajv/tags
hackerone	www.hackerone.com/bugs
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15366
launchpad	www.launchpad.net/bugs/cve/CVE-2020-15366
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-15366

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	node-ajv	any	UNKNOWN
ubuntu	20.04	noarch	node-ajv	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jul 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS26.8

CVSS35.6

EPSS0.004