CVE-2020-6856

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the…

published February 6, 2020

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00926 · 60.1th percentile
Published
2020-02-06T16:22Z
EPSS history
Timeline
  • 06 FEB 16:22Z
    An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the…
    cvelistv5