deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6273
Published: 2020-08-12
Description: SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2885671; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2885671
CVE: CVE-2020-6284
Published: 2020-08-12
Description: SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing user's privileges. If the accessing user has administrative privileges, then the execution of the script content could result in complete compromise of system confidentiality, integrity and availability, leading to Stored Cross Site Scripting.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2928635; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2928635
CVE: CVE-2020-6293
Published: 2020-08-12
Description: SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other policies such as access control lists and other upload file size restrictions, leading to Unrestricted File Upload.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://launchpad.support.sap.com/#/notes/2938162; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2938162
CVE: CVE-2020-6294
Published: 2020-08-12
Description: Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2927956; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2927956
CVE: CVE-2020-6295
Published: 2020-08-12
Description: Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view, modify and/or make unavailable any data associated with the Cockpit, leading to Information Disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532, CWE-732
References: https://launchpad.support.sap.com/#/notes/2941332; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2941332
CVE: CVE-2020-6296
Published: 2020-08-12
Description: SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application.
CVSS Score: 8.8 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2941667; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2941667
CVE: CVE-2020-6297
Published: 2020-08-12
Description: Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure.
CVSS Score: 4.4 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2940823; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2940823
CVE: CVE-2020-6298
Published: 2020-08-12
Description: SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure values, due to Missing Authorization Check.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2939685; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2939685
CVE: CVE-2020-6299
Published: 2020-08-12
Description: SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2941510; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2941510
CVE: CVE-2020-6300
Published: 2020-08-12
Description: SAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2, 4.3, allows an attacker with administrator rights can use the web application to send malicious code to a different end user (victim), as it does not sufficiently encode user-controlled inputs for RecycleBin, resulting in Stored Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2925827; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2925827
CVE: CVE-2020-6301
Published: 2020-08-12
Description: SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2949196; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2949196
CVE: CVE-2020-6309
Published: 2020-08-12
Description: SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2941315; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2941315
CVE: CVE-2020-6310
Published: 2020-08-12
Description: Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2944988; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345; https://launchpad.support.sap.com/#/notes/2944988
CVE: CVE-2020-13288
Published: 2020-08-12
Description: In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13288.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215538; https://hackerone.com/reports/856554
CVE: CVE-2020-13290
Published: 2020-08-12
Description: In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13290.json; https://gitlab.com/gitlab-org/gitlab/-/issues/32291; https://hackerone.com/reports/691477
CVE: CVE-2020-13291
Published: 2020-08-12
Description: In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.
CVSS Score: 8.1 (HIGH)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13291.json; https://gitlab.com/gitlab-org/gitlab/-/issues/230521; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13291.json
CVE: CVE-2020-12100
Published: 2020-08-12
Description: In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://seclists.org/fulldisclosure/2021/Jan/18; http://www.openwall.com/lists/oss-security/2020/08/12/1; http://www.openwall.com/lists/oss-security/2021/01/04/3
CVE: CVE-2020-12673
Published: 2020-08-12
Description: In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00048.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00059.html; https://dovecot.org/security
CVE: CVE-2020-12674
Published: 2020-08-12
Description: In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00048.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00059.html; https://dovecot.org/security
CVE: CVE-2020-17446
Published: 2020-08-12
Description: asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://github.com/MagicStack/asyncpg/releases/tag/v0.21.0; https://lists.debian.org/debian-lts-announce/2020/09/msg00002.html; https://github.com/MagicStack/asyncpg/releases/tag/v0.21.0
CVE: CVE-2020-17497
Published: 2020-08-12
Description: eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4.
CVSS Score: 8.1 (HIGH)
References: https://lists.01.org/hyperkitty/list/iwd%40lists.01.org/thread/4GUXL4Z6KZWWZINATGHNJVAEUTS3I7PG/; https://lists.01.org/hyperkitty/list/iwd%40lists.01.org/thread/4GUXL4Z6KZWWZINATGHNJVAEUTS3I7PG/
CVE: CVE-2020-15137
Published: 2020-08-12
Description: All versions of HoRNDIS are affected by an integer overflow in the RNDIS packet parsing routines. A malicious USB device can trigger disclosure of unrelated kernel memory to userspace applications on the host, or can cause the kernel to crash. Kernel memory disclosure is especially likely on 32-bit kernels; 64-bit kernels are more likely to crash on attempted exploitation. It is not believed that kernel memory corruption is possible, or that unattended kernel memory disclosure without the collaboration of a userspace program running on the host is possible. The vulnerability is in `HoRNDIS::receivePacket`. `msg_len`, `data_ofs`, and `data_len` can be controlled by an attached USB device, and a negative value of `data_ofs` can bypass the check for `(data_ofs + data_len + 8) > msg_len`, and subsequently can cause a wild pointer copy in the `mbuf_copyback` call. The software is not maintained and no patches are planned. Users of multi-tenant systems with HoRNDIS installed should only connect trusted USB devices to their system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/jwise/HoRNDIS/security/advisories/GHSA-8q4r-m3rh-57jx; https://github.com/jwise/HoRNDIS/security/advisories/GHSA-8q4r-m3rh-57jx
CVE: CVE-2020-17505
Published: 2020-08-12
Description: Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_peform.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html; https://blog.max0x4141.com/post/artica_proxy/; http://packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html
CVE: CVE-2020-17506
Published: 2020-08-12
Description: Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/158868/Artica-Proxy-4.3.0-Authentication-Bypass.html; http://packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html; https://blog.max0x4141.com/post/artica_proxy/
CVE: CVE-2020-2035
Published: 2020-08-12
Description: When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication (SNI) field within the TLS Client Hello handshake. This allows a compromised host in a protected network to evade any security policy that uses URL filtering on a firewall configured with SSL Decryption in the Forward Proxy mode. A malicious actor can then use this technique to evade detection of communication on the TLS handshake phase between a compromised host and a remote malicious server. This technique does not increase the risk of a host being compromised in the network. It does not impact the confidentiality or availability of a firewall. This is considered to have a low impact on the integrity of the firewall because the firewall fails to enforce a policy on certain traffic that should have been blocked. This issue does not impact the URL filtering policy enforcement on clear text or encrypted web transactions. This technique can be used only after a malicious actor has compromised a host in the protected network and the TLS/SSL Decryption feature is enabled for the traffic that the attacker controls. Palo Alto Networks is not aware of any malware that uses this technique to exfiltrate data. This issue is applicable to all current versions of PAN-OS. This issue does not impact Panorama or WF-500 appliances.
CVSS Score: 3.0 (LOW)
CWE: CWE-20
References: https://security.paloaltonetworks.com/CVE-2020-2035; https://www.mnemonic.no/blog/introducing-snicat/; https://security.paloaltonetworks.com/CVE-2020-2035
CVE: CVE-2020-5415
Published: 2020-08-12
Description: Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerability, so GitLab users may be moved into groups which are then configured in the Concourse team.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://github.com/concourse/concourse/security/advisories/GHSA-627p-rr78-99rj; https://tanzu.vmware.com/security/cve-2020-5415; https://github.com/concourse/concourse/security/advisories/GHSA-627p-rr78-99rj
CVE: CVE-2020-6653
Published: 2020-08-12
Description: Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's account and associated devices.
CVSS Score: 3.8 (LOW)
CWE: CWE-200, CWE-532, CWE-200, CWE-532
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-vulnerability-advisory-secure-connect-mobile-app.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-vulnerability-advisory-secure-connect-mobile-app.pdf
CVE: CVE-2020-17360
Published: 2020-08-12
Description: An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-190, CWE-787
References: http://seclists.org/fulldisclosure/2020/Aug/8; http://seclists.org/fulldisclosure/2020/Sep/11; http://seclists.org/fulldisclosure/2020/Sep/13
CVE: CVE-2020-17361
Published: 2020-08-12
Description: An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: http://seclists.org/fulldisclosure/2020/Aug/10; http://seclists.org/fulldisclosure/2020/Sep/11; http://seclists.org/fulldisclosure/2020/Sep/13
CVE: CVE-2020-17507
Published: 2020-08-12
Description: An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html
CVE: CVE-2020-7374
Published: 2020-08-12
Description: Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/rapid7/metasploit-framework/pull/13517; https://github.com/rapid7/metasploit-framework/pull/13517
CVE: CVE-2020-12106
Published: 2020-08-12
Description: The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions such as, changing credentials of the Administrator account or connect the product to a rogue access point.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.stengg.com/cybersecurity; https://www.stengg.com/media/1076253/vpncrypt-m10-cve-advisory-notice.pdf; https://www.stengg.com/cybersecurity
CVE: CVE-2020-12107
Published: 2020-08-12
Description: The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows command injection via a text field, which allow full control over this module's Operating System.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.stengg.com/cybersecurity; https://www.stengg.com/media/1076253/vpncrypt-m10-cve-advisory-notice.pdf; https://www.stengg.com/cybersecurity
CVE: CVE-2020-8904
Published: 2020-08-12
Description: An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to an arbitrary location in the trusted (enclave) memory. We recommend updating Asylo to version 0.6.0 or later.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-823, CWE-119
References: https://github.com/google/asylo/commit/e582f36ac49ee11a21d23ad6a30c333092e0a94e; https://github.com/google/asylo/commit/e582f36ac49ee11a21d23ad6a30c333092e0a94e
CVE: CVE-2020-8905
Published: 2020-08-12
Description: A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'enc_untrusted_recvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of the third 'extents' is controlled by the outside world, and not verified on copy, allowing the attacker to force Asylo to copy trusted memory data into an untrusted buffer of significantly small length.. We recommend updating Asylo to version 0.6.0 or later.
CVSS Score: 2.8 (LOW)
CWE: CWE-120, CWE-120
References: https://github.com/google/asylo/commit/299f804acbb95a612ab7c504d25ab908aa59ae93; https://github.com/google/asylo/commit/299f804acbb95a612ab7c504d25ab908aa59ae93
CVE: CVE-2020-16137
Published: 2020-08-12
Description: A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVSS Score: 9.8 (CRITICAL)
References: https://packetstormsecurity.com/files/158818/Cisco-7937G-Privilege-Escalation.html; https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/; https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE: CVE-2020-16138
Published: 2020-08-12
Description: A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVSS Score: 7.5 (HIGH)
References: https://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html; https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/; https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE: CVE-2020-16139
Published: 2020-08-12
Description: A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html; https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/; https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE: CVE-2020-16186
Published: 2020-08-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none