CVE-2020-24985

An issue was discovered in Quadbase EspressReports ES 7 Update 9

published March 15, 2021

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Published
2021-03-15T17:51Z
EPSS history
Timeline
  • 15 MAR 17:51Z
    An issue was discovered in Quadbase EspressReports ES 7 Update 9
    cvelistv5