VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026

CVE-2020-25257

CVE-2020-25257

Description

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows XXE attacks for read/write access to arbitrary files.

Affected products

3
  • Hyland/OnBasedescription
  • Hyland/OnBase2 versions
    cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*range: <=16.0.2.83
    • (no CPE)range: <=16.0.2.83, <=17.0.2.109, <=18.0.0.37, <=19.8.16.1000, <=20.3.10.1000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.