CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2020-12684
Severity
CRITICAL
CVSS
9.8
EPSS
1.12%
Original NVD Description
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)