CRITICAL🇵🇱 Wersja polska

CVE-2020-25020

CVSS 9.8v3.1pub. 2020-08-29upd. 2025-05-05

MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mpxj

    APP
    Mpxj
    ≤ 8.1.3

  • Oracle Primavera Unifier

    APP
    Oracle
    16.116.218.819.1220.1217.7 – 17.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XXE
CWE
References

Related vulnerabilities

CVE-2021-42575CRITICAL9.8ten sam produkt

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT,...

CVE-2020-9548CRITICAL9.8ten sam produkt

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and ty...

CVE-2020-9546CRITICAL9.8ten sam produkt

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and ty...

CVE-2020-9547CRITICAL9.8ten sam produkt

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and ty...

CVE-2019-20330CRITICAL9.8ten sam produkt

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.