VULNERABILITY INTELLIGENCE

CVE-2020-6932

CVSS score9.8 CRITICAL
EPSS probability3.59%
CISA KEVNot currently listed
Published2020-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.

Weakness classification

  • CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

Primary references