Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9380 State: PUBLISHED Published: 2020-03-05T12:44:52 Last Updated: 2024-08-04T10:26:16.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script. Additional Analyst Notes: - CVE Program Container: References: - https://www.whmcssmarters.com - https://github.com/migueltarga/CVE-2020-9380
CVE ID: CVE-2020-9381 State: PUBLISHED Published: 2020-02-24T21:25:54 Last Updated: 2024-08-04T10:26:16.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: controllers/admin.js in Total.js CMS 13 allows remote attackers to execute arbitrary code via a POST to the /admin/api/widgets/ URI. This can be exploited in conjunction with CVE-2019-15954. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/totaljs/cms/commit/2a26c4c6a61d3fda4527a761716ef7e1c5f7c970 - https://github.com/saddean/research/blob/master/totaljs/Broken-acces-control.md
CVE ID: CVE-2020-9382 State: PUBLISHED Published: 2020-02-24T22:17:55 Last Updated: 2024-08-04T10:26:16.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T245850 - https://gerrit.wikimedia.org/r/q/I953e060bc6994ffdba9f380c98173f53f8ca1ea8
CVE ID: CVE-2020-9383 State: PUBLISHED Published: 2020-02-25T15:48:11 Last Updated: 2024-08-04T10:26:16.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2e90ca68b0d2f5548804f22f0dd61145516171e3 - https://security.netapp.com/advisory/ntap-20200313-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html - https://usn.u
dvisory/ntap-20200313-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html - https://usn.ubuntu.com/4344-1/ - https://usn.ubuntu.com/4345-1/ - https://usn.ubuntu.com/4342-1/ - https://usn.ubuntu.com/4346-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2f9ac30a54dc0181ddac3705cdcf4775d863c530
CVE ID: CVE-2020-9384 State: PUBLISHED Published: 2020-04-14T19:52:19 Last Updated: 2024-08-04T10:26:16.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the application Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.subex.com/partner-settlement/ - http://packetstormsecurity.com/files/157197/Subex-ROC-Partner-Settlement-10.5-Insecure-Direct-Ob
m/partner-settlement/ - http://packetstormsecurity.com/files/157197/Subex-ROC-Partner-Settlement-10.5-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2020-9385 State: PUBLISHED Published: 2020-02-24T23:14:26 Last Updated: 2024-08-04T10:26:16.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zint/tickets/181/
CVE ID: CVE-2020-9386 State: PUBLISHED Published: 2020-03-09T14:14:43 Last Updated: 2024-08-04T10:26:16.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1840201 - https://mahara.org/interaction/forum/topic.php?id=8589
CVE ID: CVE-2020-9387 State: PUBLISHED Published: 2020-04-30T12:46:59 Last Updated: 2024-08-04T10:26:16.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1836984 - https://mahara.org/interaction/forum/topic.php?id=8612
CVE ID: CVE-2020-9388 State: PUBLISHED Published: 2021-02-03T00:00:00 Last Updated: 2024-08-04T10:26:16.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://support.squaredup.com/hc/en-us/articles/360017568238 - https://support.squaredup.com/hc/en-us/articles/360019427218-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF - https://scomsupport.squ
.com/hc/en-us/articles/360019427218-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF - https://scomsupport.squaredup.com/hc/en-us/articles/8862921957533-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF
CVE ID: CVE-2020-9389 State: PUBLISHED Published: 2021-02-03T19:03:47 Last Updated: 2024-08-04T10:26:16.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames. Additional Analyst Notes: - CVE Program Container: References: - https://support.squaredup.com/hc/en-us/articles/360017255858 - https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attack
CVE ID: CVE-2020-9390 State: PUBLISHED Published: 2021-02-03T00:00:00 Last Updated: 2024-08-04T10:26:16.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script. Additional Analyst Notes: - CVE Program Container: References: - https://support.squaredup.com/hc/en-us/articles/360017568258 - https://support.squaredup.com/hc/en-us/articles/360019427258-CVE-2020-9390-Stored-cross-site-scripting - https://scomsupport.squaredup.com/hc/en-us/articles/8862922003869-CVE-2020-9390-Stored-cross-site-scripting-Web-Content-
https://scomsupport.squaredup.com/hc/en-us/articles/8862922003869-CVE-2020-9390-Stored-cross-site-scripting-Web-Content-and-Visio-tile-
CVE ID: CVE-2020-9391 State: PUBLISHED Published: 2020-02-25T17:55:59 Last Updated: 2024-08-04T10:26:16.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde23731
Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663a - https://bugzilla.redhat.com/show_bug.cgi?id=1797052 - http://www.openwall.com/lists/oss-security/2020/02/25/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4LH35HOPBJIKYHYFXMBBM75DN75PZHZ/ - https://security.netapp.com/advisory/ntap-20200313-0003/
CVE ID: CVE-2020-9392 State: PUBLISHED Published: 2020-03-23T16:14:51 Last Updated: 2024-08-04T10:26:16.120Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2020/02/multiple-vulnerabilities-patched-in-pricing-tab
Program Container: References: - https://www.wordfence.com/blog/2020/02/multiple-vulnerabilities-patched-in-pricing-table-by-supsystic-plugin/
CVE ID: CVE-2020-9393 State: PUBLISHED Published: 2020-02-25T18:06:53 Last Updated: 2024-08-04T10:26:16.096Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pricing-table-by-supsystic/#developers
CVE ID: CVE-2020-9394 State: PUBLISHED Published: 2020-02-25T18:07:00 Last Updated: 2024-08-04T10:26:16.083Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pricing-table-by-supsystic/#developers
CVE ID: CVE-2020-9395 State: PUBLISHED Published: 2020-07-06T21:09:28 Last Updated: 2024-08-04T10:26:16.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ambiot/amb1_arduino/commit/dcea55cf9775a0166805b3db845b237ecd5e74ea#diff-d06e7a87f34cc464a56799a419033014 - https://github.com/ambiot/amb1_sdk/commit/bc5173d5d4faf6829074b0f1e1b242c12b7
ea#diff-d06e7a87f34cc464a56799a419033014 - https://github.com/ambiot/amb1_sdk/commit/bc5173d5d4faf6829074b0f1e1b242c12b7777a3#diff-700c216fb376666eaeda0c892e8bdc09 - https://www.amebaiot.com/en/security_bulletin/
CVE ID: CVE-2020-9398 State: PUBLISHED Published: 2020-02-25T20:23:55 Last Updated: 2024-08-04T10:26:16.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.ispconfig.org/blog/ispconfig-3-1-15p3-released-security-bugfix-release/
CVE ID: CVE-2020-9399 State: PUBLISHED Published: 2020-02-28T13:58:46 Last Updated: 2024-08-04T10:26:16.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html - https://seclists.org/fulldisclosure/2020/Feb/35
CVE ID: CVE-2020-9402 State: PUBLISHED Published: 2020-03-05T14:49:57 Last Updated: 2024-08-04T10:26:16.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possible to break escaping and inject malicious SQL. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/3.0/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/fLUh_pOaKrY - https://ww
oject.com/en/3.0/releases/security/ - https://groups.google.com/forum/#%21topic/django-announce/fLUh_pOaKrY - https://www.djangoproject.com/weblog/2020/mar/04/security-releases/ - https://usn.ubuntu.com/4296-1/ - https://security.netapp.com/advisory/ntap-20200327-0004/ - https://security.gentoo.org/glsa/202004-17 - https://www.debian.org/security/2020/dsa-4705 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZMN2NKAGTFE3YKMNM2JVJG7R2W7LLHY/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00035.html
CVE ID: CVE-2020-9403 State: PUBLISHED Published: 2020-08-11T18:26:06 Last Updated: 2024-08-04T10:26:16.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved by any user with access to the PACTware workstation. Additional Analyst Notes: - CVE Program Container: References: - https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf
CVE ID: CVE-2020-9404 State: PUBLISHED Published: 2020-08-11T18:24:36 Last Updated: 2024-08-04T10:26:16.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords. Additional Analyst Notes: - CVE Program Container: References: - https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf
CVE ID: CVE-2020-9405 State: PUBLISHED Published: 2020-02-25T00:00:00 Last Updated: 2024-08-04T10:26:16.085Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dawid-czarnecki/public-vulnerabilities/tree/master/Online_Weather - https://zigrin.com/advisories/online-weather-reflected-xss-in-redirect-page/
CVE ID: CVE-2020-9406 State: PUBLISHED Published: 2020-02-25T00:00:00 Last Updated: 2024-08-04T10:26:16.075Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dawid-czarnecki/public-vulnerabilities/tree/master/Online_Weather - https://zigrin.com/advisories/online-weather-command-injection-in-querybcp-method/
CVE ID: CVE-2020-9407 State: PUBLISHED Published: 2020-02-25T00:00:00 Last Updated: 2024-08-04T10:26:16.117Z Severity: LOW (CVSS 3.1 CVSS:3.0/AC:H/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dawid-czarnecki/public-vulnerabilities/tree/master/Online_Weather - https://zigrin.com/advisories/online-weather-information-disclosure-in-cookie/
CVE ID: CVE-2020-9408 State: PUBLISHED Published: 2020-03-11T19:55:12.878877Z Last Updated: 2024-09-16T22:30:59.464Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could execute arbitrary code with the privileges of the system account that started the Spotfire Web Player, Analyst clients, or TERR Service. Description: The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Serve
ibrary component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files and objects saved to the library such that the system treats them as trusted. This could allow an attacker to cause the Spotfire Web Player, Analyst clients, and TERR Service into executing arbitrary code with the privileges of the system account that started those processes. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and
. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and below and TIBCO Spotfire Server: versions 7.11.9 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, and 10.3.6, versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, and 10.8.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2020/03/tibco-security-advisory-march-11-2020-tibco-spotfire-server
CVE ID: CVE-2020-9409 State: PUBLISHED Published: 2020-05-20T12:25:13.045417Z Last Updated: 2024-09-17T01:16:13.966Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the possibility that an unauthenticated user obtains JasperReports Server "superuser" permission, and further might be able to execute arbitrary code with the system account that started the affected component. Description: The administrative UI component of TIBCO Software Inc.'s TIBCO J
count that started the affected component. Description: The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a JasperReports Server "superuser" for the affected systems. The attacker can theoretically exploit the vulnerability consistently, remotely, and without authenticating. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 7.1.1 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.1.1 and below, and TIBCO
ts Server: versions 7.1.1 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.1.1 and below, and TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.1.1 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2020-9410 State: PUBLISHED Published: 2020-05-20T12:25:13.466596Z Last Updated: 2024-09-16T19:24:39.249Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the possibility that an attacker could gain full control of the web interface displaying a generated report. Since the TIBCO JasperReports Library is used to generate reports as a component of web interfaces, the
nerated report. Since the TIBCO JasperReports Library is used to generate reports as a component of web interfaces, the theoretical impact of this vulnerability is that the attacker can obtain the privileges of the highest privileged owner that views a maliciously generated report. Description: The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an attacker to exploit HTML injection to gain full control of a web interface containing t
ity that theoretically allows an attacker to exploit HTML injection to gain full control of a web interface containing the output of the report generator component with the privileges of any user that views the affected report(s). The attacker can theoretically exploit this vulnerability when other users view a maliciously generated report, where those reports use Fusion Charts and a data source with contents controlled by the attacker. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions 7.1.1 and below, versions 7.2.0 and 7.2.1, version 7.3.0, version 7.5.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions 7.1.1 and below, TIBCO JasperReports Server:
version 7.5.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions 7.1.1 and below, TIBCO JasperReports Server: versions 7.1.1 and below, version 7.2.0, version 7.5.0, TIBCO JasperReports Server for AWS Marketplace: versions 7.5.0 and below, and TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.1.1 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2020-9411 State: PUBLISHED Published: 2020-06-09T17:00:20.479648Z Last Updated: 2024-09-16T23:36:37.923Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Managed File Transfer Platform Server for IBM i Problem Types: The impact of this vulnerability includes the possibility that an attacker could gain access to the contents of files they are otherwise not authorized to see, and modify files they otherwise should not be able to change, and affect the availability of the hosting system, by way of damaging critical system files. Description: The file transfer component of TIBCO Software Inc.'s TIBCO Managed File T