VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026

CVE-2020-25252

CVE-2020-25252

Description

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default credentials (the wstinol password for the manager or hsi account).

Affected products

2
  • Hyland/OnBasedescription
  • Hyland/OnBasellm-fuzzy
    Range: <=16.0.2.83, <=17.0.2.109, <=18.0.0.37, <=19.8.16.1000, <=20.3.10.1000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.