deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-14198
Published: 2020-09-10
Description: Bitcoin Core 0.20.0 allows remote denial of service.
CVSS Score: 7.5 (HIGH)
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2020-14198; https://github.com/bitcoin/bitcoin/commits/master; https://security.gentoo.org/glsa/202009-18
CVE: CVE-2020-17408
Published: 2020-09-10
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the clpwebmc executable. Due to the improper restriction of XML External Entity (XXE) references, a specially-crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-10801.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://www.support.nec.co.jp/en/View.aspx?id=[PII_REDACTED]; https://www.zerodayinitiative.com/advisories/ZDI-20-1102/; https://www.support.nec.co.jp/en/View.aspx?id=[PII_REDACTED]
CVE: CVE-2020-24582
Published: 2020-09-10
Description: Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.zulip.com/2020/09/10/zulip-desktop-5-4-3-security-release/; https://blog.zulip.com/2020/09/10/zulip-desktop-5-4-3-security-release/
CVE: CVE-2020-4578
Published: 2020-09-10
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184433.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184433; https://www.ibm.com/support/pages/node/6328895; https://exchange.xforce.ibmcloud.com/vulnerabilities/184433
CVE: CVE-2020-9732
Published: 2020-09-10
Description: The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9733
Published: 2020-09-10
Description: An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-269
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9734
Published: 2020-09-10
Description: The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9735
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when search queries return the page containing the vulnerable field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9736
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when browsing to the page containing the vulnerable field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9737
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9738
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9740
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9741
Published: 2020-09-10
Description: The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9742
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below) and 6.3.3.8 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Inbox calendar feature. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-9743
Published: 2020-09-10
Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE: CVE-2020-15024
Published: 2020-09-10
Description: An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-212, CWE-459
References: http://nestedif.com/avast-antivirus-password-manager-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/; http://nestedif.com/avast-antivirus-password-manager-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/
CVE: CVE-2020-11998
Published: 2020-09-10
Description: A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html "A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code." Mitigation: Upgrade to Apache ActiveMQ 5.15.13
CVSS Score: 9.8 (CRITICAL)
References: http://activemq.apache.org/security-advisories.data/CVE-2020-11998-announcement.txt; https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E; https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
CVE: CVE-2020-13920
Published: 2020-09-10
Description: Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-306
References: http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt; https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E; https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
CVE: CVE-2020-15168
Published: 2020-09-10
Description: node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relying on node-fetch to gate files above a size, the impact could be significant, for example: If you don't double-check the size of the data after fetch() has completed, your JS thread could get tied up doing work on a large file (DoS) and/or cost you money in computing.
CVSS Score: 2.6 (LOW)
CWE: CWE-20, CWE-770, CWE-770
References: https://github.com/node-fetch/node-fetch/security/advisories/GHSA-w7rc-rwvf-8q5r; https://www.npmjs.com/package/node-fetch; https://github.com/node-fetch/node-fetch/security/advisories/GHSA-w7rc-rwvf-8q5r
CVE: CVE-2020-15170
Published: 2020-09-10
Description: apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internet(which is not recommended), there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Malicious hackers may access apollo-adminservice apis directly to access/edit the application's configurations. To fix the potential issue without upgrading, simply follow the advice that do not expose apollo-adminservice to internet.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: https://github.com/ctripcorp/apollo/pull/3233/commits/ae9ba6cfd32ed80469f162e5e3583e2477862ddf; https://github.com/ctripcorp/apollo/security/advisories/GHSA-xpmx-h7xq-xffh; https://github.com/ctripcorp/apollo/pull/3233/commits/ae9ba6cfd32ed80469f162e5e3583e2477862ddf
CVE: CVE-2020-9725
Published: 2020-09-10
Description: Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a malicious FrameMaker file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-54.html; https://helpx.adobe.com/security/products/framemaker/apsb20-54.html
CVE: CVE-2020-9726
Published: 2020-09-10
Description: Adobe FrameMaker version 2019.0.6 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious FrameMaker file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb20-54.html; https://helpx.adobe.com/security/products/framemaker/apsb20-54.html
CVE: CVE-2020-9727
Published: 2020-09-10
Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb20-52.html; https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE: CVE-2020-9728
Published: 2020-09-10
Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb20-52.html; https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE: CVE-2020-9729
Published: 2020-09-10
Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb20-52.html; https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE: CVE-2020-9730
Published: 2020-09-10
Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb20-52.html; https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE: CVE-2020-9731
Published: 2020-09-10
Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb20-52.html; https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE: CVE-2020-15171
Published: 2020-09-10
Description: In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. The only workaround is to give SCRIPT right only to trusted users.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-94, CWE-74
References: https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7qw5-pqhc-xm4g; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7qw5-pqhc-xm4g
CVE: CVE-2014-1420
Published: 2020-09-11
Description: On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1.
CVSS Score: 3.8 (LOW)
CWE: CWE-59, CWE-502
References: http://bazaar.launchpad.net/~ubuntu-sdk-team/ubuntu-ui-toolkit/staging/revision/1182; https://launchpad.net/bugs/1348241; http://bazaar.launchpad.net/~ubuntu-sdk-team/ubuntu-ui-toolkit/staging/revision/1182
CVE: CVE-2020-25247
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2020/Oct/9; https://seclists.org/fulldisclosure/2020/Sep/21; http://seclists.org/fulldisclosure/2020/Oct/9
CVE: CVE-2020-25248
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2020/Oct/9; https://seclists.org/fulldisclosure/2020/Oct/9; https://seclists.org/fulldisclosure/2020/Sep/21
CVE: CVE-2020-25249
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is desired. This can be problematic for use cases in a regulated industry, where server-side logging is required in additional situations.
CVSS Score: 5.3 (MEDIUM)
References: https://seclists.org/fulldisclosure/2020/Sep/8; https://seclists.org/fulldisclosure/2020/Sep/8
CVE: CVE-2020-25250
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client applications can write arbitrary data to the server logs.
CVSS Score: 7.5 (HIGH)
References: https://seclists.org/fulldisclosure/2020/Sep/8; https://seclists.org/fulldisclosure/2020/Sep/8
CVE: CVE-2020-25251
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for critical functions such as adding users or retrieving sensitive information.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://seclists.org/fulldisclosure/2020/Sep/16; https://seclists.org/fulldisclosure/2020/Sep/16
CVE: CVE-2020-25252
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default credentials (the wstinol password for the manager or hsi account).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://seclists.org/fulldisclosure/2020/Sep/9; https://seclists.org/fulldisclosure/2020/Sep/9
CVE: CVE-2020-25253
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by the TableName, ColumnName, Name, UserId, or Password parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://seclists.org/fulldisclosure/2020/Sep/7; https://seclists.org/fulldisclosure/2020/Sep/7
CVE: CVE-2020-25254
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by TestConnection_LocalOrLinkedServer, CreateFilterFriendlyView, or AddWorkViewLinkedServer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2020/Oct/9; https://seclists.org/fulldisclosure/2020/Oct/9; https://seclists.org/fulldisclosure/2020/Sep/7
CVE: CVE-2020-25255
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote attackers to cause a denial of service (outage of connection-request processing) via a long user ID, which triggers an exception and a large log entry.
CVSS Score: 7.5 (HIGH)
References: https://seclists.org/fulldisclosure/2020/Sep/17; https://seclists.org/fulldisclosure/2020/Sep/17
CVE: CVE-2020-25256
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. PKI certificates have a private key that is the same across different customers' installations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: https://seclists.org/fulldisclosure/2020/Sep/18; https://seclists.org/fulldisclosure/2020/Sep/18
CVE: CVE-2020-25257
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows XXE attacks for read/write access to arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://seclists.org/fulldisclosure/2020/Sep/23; https://seclists.org/fulldisclosure/2020/Sep/23
CVE: CVE-2020-25258
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses ASP.NET BinaryFormatter.Deserialize in a manner that allows attackers to transmit and execute bytecode in SOAP messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://seclists.org/fulldisclosure/2020/Sep/22; https://seclists.org/fulldisclosure/2020/Sep/22