VULNERABILITY INTELLIGENCE

CVE-2020-7865

CVSS score9.8 CRITICAL

EPSS probability0.95%

CISA KEVNot currently listed

Published2021-09-07

Last modified2026-06-17

Description

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system.