HIGH🇵🇱 Wersja polska

CVE-2020-26869

CVSS 7.5v3.1pub. 2020-10-12upd. 2026-07-09

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Arcinfo Pcvue

    APP
    Arcinfo
    8.10 – 12.0.17 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-26867CRITICAL9.8PL ✓same product

RCE poprzez deserializację niezaufanych danych w ARC Informatique PcVue

CVE-2026-14868HIGH8.4PL ✓same product

Słaby algorytm szyfrowania konfiguracji kont w PcVue

CVE-2020-26868HIGH7.5same product

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability...

CVE-2011-4042HIGH9.3same product

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantV...

CVE-2011-4043HIGH9.3same product

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, ...