Critical severity9.8NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026
CVE-2020-25254
CVE-2020-25254
Description
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by TestConnection_LocalOrLinkedServer, CreateFilterFriendlyView, or AddWorkViewLinkedServer.
Affected products
2- Hyland/OnBasedescription
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2020/Oct/9nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2020/Oct/9nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2020/Sep/7nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.