Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8734 State: PUBLISHED Published: 2021-02-02T20:20:34 Last Updated: 2024-08-04T10:12:09.580Z Vendors: n/a Products: Intel® Server Board M10JNP2SB Advisory Problem Types: escalation of privilege Description: Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00386.html
CVE ID: CVE-2020-8735 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2020-8736 State: PUBLISHED Published: 2020-08-13T02:22:20 Last Updated: 2024-08-04T10:12:09.503Z Vendors: n/a Products: Intel(R) Computing Improvement Program Advisory Problem Types: Escalation of Privilege Description: Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00387.html
CVE ID: CVE-2020-8737 State: PUBLISHED Published: 2020-11-12T18:02:41 Last Updated: 2024-08-04T10:12:10.119Z Vendors: n/a Products: Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software Problem Types: escalation of privilege and/or information disclosure Description: Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/securi
access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388
CVE ID: CVE-2020-8738 State: PUBLISHED Published: 2020-11-12T18:04:29 Last Updated: 2024-08-04T10:12:09.569Z Vendors: n/a Products: Intel BIOS platform sample code for some Intel(R) Processors Problem Types: escalation of privilege Description: Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390 - https://security.netapp.com/advisory/ntap-20210122-0008/
CVE ID: CVE-2020-8739 State: PUBLISHED Published: 2020-11-12T18:04:47 Last Updated: 2024-08-04T10:12:09.645Z Vendors: n/a Products: Intel BIOS platform sample code for some Intel(R) Processors Problem Types: escalation of privilege Description: Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390 - https://security.netapp.com/advisory/ntap-20210122-0008/
CVE ID: CVE-2020-8740 State: PUBLISHED Published: 2020-11-12T18:04:38 Last Updated: 2024-08-04T10:12:09.631Z Vendors: n/a Products: Intel BIOS platform sample code for some Intel(R) Processors Problem Types: escalation of privilege Description: Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390 - https://security.netapp.com/advisory/ntap-20210122-0008/
CVE ID: CVE-2020-8741 State: PUBLISHED Published: 2021-11-17T19:44:10 Last Updated: 2024-08-04T10:12:09.625Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) Problem Types: escalation of privilege Description: Improper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all versions, for Windows may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00393.html
CVE ID: CVE-2020-8742 State: PUBLISHED Published: 2020-08-13T02:15:45 Last Updated: 2024-08-04T10:12:09.646Z Vendors: n/a Products: Intel(R) NUCs Advisory Problem Types: Escalation of Privilege Description: Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html
CVE ID: CVE-2020-8743 State: PUBLISHED Published: 2020-08-13T02:14:49 Last Updated: 2024-08-04T10:12:09.512Z Vendors: n/a Products: Intel(R) Mailbox Interface driver Advisory Problem Types: Escalation of Privilege Description: Improper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00394.html
CVE ID: CVE-2020-8744 State: PUBLISHED Published: 2020-11-12T18:06:17 Last Updated: 2024-08-04T10:12:10.153Z Vendors: n/a Products: Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS Problem Types: escalation of privilege Description: Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.co
ferences: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0004/ - https://security.netapp.com/advisory/ntap-20201113-0005/ - https://security.netapp.com/advisory/ntap-20201113-0002/ - https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf
CVE ID: CVE-2020-8745 State: PUBLISHED Published: 2020-11-12T18:06:09 Last Updated: 2024-08-04T10:12:09.559Z Vendors: n/a Products: Intel(R) CSME, Intel(R) TXE Problem Types: escalation of privilege Description: Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/ad
nces: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0005/ - https://security.netapp.com/advisory/ntap-20201113-0002/ - https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
CVE ID: CVE-2020-8746 State: PUBLISHED Published: 2020-11-12T18:09:33 Last Updated: 2024-08-04T10:12:09.493Z Vendors: n/a Products: Intel(R) AMT Problem Types: denial of service Description: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8747 State: PUBLISHED Published: 2020-11-12T18:09:04 Last Updated: 2024-08-04T10:12:09.650Z Vendors: n/a Products: Intel(R) AMT Problem Types: information disclosure and/or denial of service Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8748 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2020-8749 State: PUBLISHED Published: 2020-11-12T18:09:41 Last Updated: 2024-08-04T10:12:09.632Z Vendors: n/a Products: Intel(R) AMT Problem Types: escalation of privilege Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8750 State: PUBLISHED Published: 2020-11-12T18:07:05 Last Updated: 2024-08-04T10:12:10.538Z Vendors: n/a Products: Intel(R) TXE Problem Types: escalation of privilege Description: Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0005/
CVE ID: CVE-2020-8751 State: PUBLISHED Published: 2020-11-12T18:08:23 Last Updated: 2024-08-04T10:12:09.653Z Vendors: n/a Products: Intel(R) CSME, Intel(R) TXE Problem Types: information disclosure Description: Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0005/ - https://security.netapp.com/advisory/ntap-20201113-000
0391 - https://security.netapp.com/advisory/ntap-20201113-0005/ - https://security.netapp.com/advisory/ntap-20201113-0002/
CVE ID: CVE-2020-8752 State: PUBLISHED Published: 2020-11-12T18:05:24 Last Updated: 2024-08-04T10:12:09.645Z Vendors: n/a Products: Intel(R) AMT, Intel(R) ISM versions Problem Types: escalation of privileges Description: Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8753 State: PUBLISHED Published: 2020-11-12T18:05:32 Last Updated: 2024-08-04T10:12:09.616Z Vendors: n/a Products: Intel(R) AMT, Intel(R) ISM versions Problem Types: information disclosure Description: Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8754 State: PUBLISHED Published: 2020-11-12T18:08:35 Last Updated: 2024-08-04T10:12:10.593Z Vendors: n/a Products: Intel(R) AMT, Intel(R) ISM Problem Types: information disclosure Description: Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8755 State: PUBLISHED Published: 2020-11-12T18:09:17 Last Updated: 2024-08-04T10:12:10.458Z Vendors: n/a Products: Intel(R) CSME, Intel(R) SPS Problem Types: escalation of privilege Description: Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0004/ - https://security.netapp.com/advis
r/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0004/ - https://security.netapp.com/advisory/ntap-20201113-0002/
CVE ID: CVE-2020-8756 State: PUBLISHED Published: 2020-11-12T18:07:46 Last Updated: 2024-08-04T10:12:10.370Z Vendors: n/a Products: Intel(R) CSME Problem Types: escalation of privilege Description: Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0002/
CVE ID: CVE-2020-8757 State: PUBLISHED Published: 2020-11-12T18:07:38 Last Updated: 2024-08-04T10:12:10.134Z Vendors: n/a Products: Intel(R) AMT Problem Types: escalation of privilege Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8758 State: PUBLISHED Published: 2020-09-10T14:22:14 Last Updated: 2024-08-04T10:12:10.441Z Vendors: n/a Products: Intel(R) AMT and Intel(R) ISM Problem Types: Escalation of Privilege Description: Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/securit
access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html - https://security.netapp.com/advisory/ntap-20200911-0005/
CVE ID: CVE-2020-8759 State: PUBLISHED Published: 2020-08-13T02:09:32 Last Updated: 2024-08-04T10:12:10.323Z Vendors: n/a Products: Intel(R) SSD DCT Advisory Problem Types: Escalation of Privilege Description: Improper access control in the installer for Intel(R) SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00406.html
CVE ID: CVE-2020-8760 State: PUBLISHED Published: 2020-11-12T18:08:03 Last Updated: 2024-08-04T10:12:10.229Z Vendors: n/a Products: Intel(R) AMT Problem Types: escalation of privilege Description: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0003/
CVE ID: CVE-2020-8761 State: PUBLISHED Published: 2020-11-12T18:08:46 Last Updated: 2024-08-04T10:12:10.490Z Vendors: n/a Products: Intel(R) CSME Problem Types: information disclosure Description: Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 - https://security.netapp.com/advisory/ntap-20201113-0002/
CVE ID: CVE-2020-8762 State: REJECTED Published: N/A Last Updated: 2023-03-22T00:00:00 Description: No description available.
CVE ID: CVE-2020-8763 State: PUBLISHED Published: 2020-08-13T02:14:14 Last Updated: 2024-08-04T10:12:10.282Z Vendors: n/a Products: Intel(R) RealSense(TM) D400 Series Advisory Problem Types: Escalation of Privilege Description: Improper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for Windows* 10 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00396.html
CVE ID: CVE-2020-8764 State: PUBLISHED Published: 2020-11-12T18:04:12 Last Updated: 2024-08-04T10:12:10.391Z Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390 - https://security.netapp.com/advisory/ntap-20210122-0008/
CVE ID: CVE-2020-8765 State: PUBLISHED Published: 2021-02-17T13:57:07 Last Updated: 2024-08-04T10:12:10.643Z Vendors: n/a Products: Intel(R) RealSense(TM) DCM Problem Types: escalation of privilege Description: Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00397.html
CVE ID: CVE-2020-8766 State: PUBLISHED Published: 2020-11-12T18:10:07 Last Updated: 2024-08-04T10:12:10.289Z Vendors: n/a Products: Intel(R) SGX DCAP software Problem Types: denial of service Description: Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00398
CVE ID: CVE-2020-8767 State: PUBLISHED Published: 2020-11-12T18:10:26 Last Updated: 2024-08-04T10:12:10.558Z Vendors: n/a Products: Intel(R) 50GbE IP Core for Intel(R) Quartus Prime Problem Types: denial of service Description: Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00400
CVE ID: CVE-2020-8768 State: PUBLISHED Published: 2020-02-17T20:06:21 Last Updated: 2024-08-04T10:12:10.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-001 - https://www.us-cert.gov/ics/advisories/icsa-20-063-02
CVE ID: CVE-2020-8771 State: PUBLISHED Published: 2020-02-06T16:27:19 Last Updated: 2024-08-04T10:12:10.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10010 - https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/
CVE ID: CVE-2020-8772 State: PUBLISHED Published: 2020-02-06T16:27:31 Last Updated: 2024-08-04T10:12:10.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10011 - https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/
CVE ID: CVE-2020-8773 State: PUBLISHED Published: 2020-04-29T14:24:21 Last Updated: 2024-08-04T10:12:10.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536
CVE ID: CVE-2020-8774 State: PUBLISHED Published: 2020-04-29T14:11:01 Last Updated: 2024-08-04T10:12:10.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. Additional Analyst Notes: - CVE Program Container: References: - https://community.pega.com/node/1913996
CVE ID: CVE-2020-8775 State: PUBLISHED Published: 2020-04-29T15:50:01 Last Updated: 2024-08-04T10:12:10.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. Additional Analyst Notes: - CVE Program Container: References: - https://www.pega.com/products/pega-platform - https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536
CVE ID: CVE-2020-8776 State: PUBLISHED Published: 2020-03-02T18:30:04 Last Updated: 2024-08-04T10:12:10.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/snippets/1937042 - https://issues.alfresco.com/jira/browse/ALF-22110 - http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html