CVE-2019-20155

An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4

published January 5, 2020

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02467 · 84.4th percentile
Published
2020-01-05T22:23Z
EPSS history
Timeline
  • 05 JAN 22:23Z
    An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4
    cvelistv5