CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.
CVE
CVE-2020-22789
Severity
MEDIUM
CVSS
6.1
EPSS
1.24%
Original NVD Description
Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via the login page. The XSS is executed when an administrator accesses the logs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)