Critical severity9.8NVD Advisory· Published Jul 15, 2020· Updated Jun 17, 2026
CVE-2020-12684
CVE-2020-12684
Description
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
Affected products
2cpe:2.3:a:inetsoftware:i-net_clear_reports:19.0.287:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inetsoftware:i-net_clear_reports:19.0.287:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- www.inetsoftware.de/documentation/clear-reports/release-notes/releasesnvdRelease NotesVendor Advisory
- www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_20.4nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.