Critical severity9.8NVD Advisory· Published Apr 6, 2020· Updated Jun 17, 2026

CVE-2020-11586

Description

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

Affected products

CIPPlanner/CIPAcedescription
CIPPlanner/CIPAcellm-fuzzy2 versions
9.1 Build 2019092801+ 1 more
- (no CPE)range: 9.1 Build 2019092801
- cpe:2.3:a:cipplanner:cipace:*:*:*:*:*:*:*:*range: <9.1
CIPPlanner/CIPAce Enterprise Platformllm-fuzzy
Range: 9.1 Build 2019092801

Patches

Vulnerability mechanics

References

www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000