Critical severity9.8NVD Advisory· Published Jan 11, 2021· Updated Jun 17, 2026

CVE-2020-35205

Description

Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Quest/Policy Authoritydescription
Quest/Web Compliance Managerllm-create
Range: 8.1.2.200
Quest/Policy Authorityllm-fuzzy
Range: 8.1.2.200

Patches

Vulnerability mechanics

References

clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communicationsnvdExploitThird Party Advisory
un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communicationsnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000