XXE Injection Vulnerability in i-net Clear Reports 2019 19.0.287 (Designer)

CVE-2020-12684 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.

Learn more about our External Network Penetration Testing.