CVEvulnerability

CVE-2020-25257

9.8 CRITICAL Published 2020-09-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-611

Description

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows XXE attacks for read/write access to arbitrary files.

Affected configurations

• hyland onbase (<= 16.0.2.83) • hyland onbase (>= 17.0.0.0 <= 17.0.2.109) • hyland onbase (>= 18.0.0.0 <= 18.0.0.37) • hyland onbase (>= 19.0.0.0 <= 19.8.16.1000) • hyland onbase (>= 20.0.0.0 <= 20.3.10.1000)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References