CVE-2020-14940

HIGH · CVSS 7.5 EPSS 3.59%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-06-23 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Java.

CVE

CVE-2020-14940

Severity

HIGH

CVSS

7.5

EPSS

3.59%

Java

Original NVD Description

An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.