← All advisories

Medium severity6.1NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2019-20635

CVE-2019-20635

Description

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.

Affected products

4

Intland/Codebeamer2 versions
cpe:2.3:a:intland:codebeamer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:intland:codebeamer:*:*:*:*:*:*:*:*range: <=9.4.0
- cpe:2.3:a:intland:codebeamer:9.5.0:rc2:*:*:*:*:*:*
codeBeamer/codeBeamerdescription
CodeBeamer/codeBeamerllm-create
Range: <9.5.0-RC3

Patches

Vulnerability mechanics

References

1

codebeamer.com/cb/wiki/7372223nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.