← All advisories

Medium severity5.4NVD Advisory· Published Jan 12, 2021· Updated Jun 17, 2026

CVE-2020-13116

CVE-2020-13116

Description

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.

Affected products

4

OpenText/Carbonite Server Backup Portaldescription
Carbonite/Server Backup Portal
cpe:2.3:a:carbonite:server_backup_portal:*:*:*:*:*:*:*:*
Range: >=8.81,<8.87
Opentext/Carbonite Safe Server Backupllm-fuzzy
Range: <8.8.7
Carbonite/Carbonite Server Backup Portalllm-create
Range: <8.8.7

Patches

Vulnerability mechanics

References

1

support.carbonite.com/evault/articles/Cross-site-scripting-vulnerability-in-Carbonite-Server-Backup-Portal-policies-functionalitynvdVendor Advisory

News mentions

0

No linked articles in our index yet.