critical9.8
CVE-2020-12684
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to…
Impact
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inetsoftware | I-Net Clear Reports | Version 19.0.287 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_20.4
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_20.4