CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It may be remotely exploitable.
CVE
CVE-2020-22790
Severity
MEDIUM
CVSS
5.4
EPSS
1.29%
Original NVD Description
Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)