CVE-2020-14493CWE-250

OpenClinic GA

High · published July 29, 2020

CVSS v3.1
8.8
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01684 · 76.8th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2020-07-29T12:27Z
EPSS history
Timeline
  • 29 JUL 12:27Z
    OpenClinic GA
    cvelistv5