VULNERABILITY INTELLIGENCE

CVE-2020-25849

CVSS score8.8 HIGH
EPSS probability2.23%
CISA KEVNot currently listed
Published2020-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token.

Weakness classification

  • twcert@cert.org.tw: CWE-78
  • nvd@nist.gov: CWE-78

Primary references