VULNERABILITY INTELLIGENCE

CVE-2020-7480

CVSS score9.8 CRITICAL
EPSS probability1.54%
CISA KEVNot currently listed
Published2020-03-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references