VULNERABILITY INTELLIGENCE

CVE-2020-26868

CVSS score7.5 HIGH

EPSS probability2.15%

CISA KEVNot currently listed

Published2020-10-12

Last modified2026-07-09

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.

Weakness classification

vulnerability@kaspersky.com: CWE-767
nvd@nist.gov: CWE-668

Primary references

vulnerability@kaspersky.com — Broken Link
vulnerability@kaspersky.com — Third Party Advisory, US Government Resource
vulnerability@kaspersky.com — Vendor Advisory
vulnerability@kaspersky.com — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory