VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Mar 20, 2020· Updated Jun 17, 2026

CVE-2020-1696

CVE-2020-1696

Description

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Dogtag/Dogtagpki
    cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*
    Range: >=10.0,<=10.8.3
  • Red Hat/Certificate System2 versions
    cpe:2.3:a:redhat:certificate_system:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:certificate_system:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:certificate_system:9.0:*:*:*:*:*:*:*
  • Pki Core Project/Pki Corellm-fuzzy2 versions
    10.x.x+ 1 more
    • (no CPE)range: 10.x.x
    • (no CPE)range: all pki-core 10.x.x versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.