AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-3936

CRITICAL · CVSS 10 EPSS 1.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-03-27 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 10.0. See the original NVD description below for full technical details.

CVE
CVE-2020-3936
Severity
CRITICAL
CVSS
10
EPSS
1.25%

Original NVD Description

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.

Related CVEs

Other vulnerabilities affecting the same vendor(s)