CVE-2020-6932

Katalog CVE

CVSS 9.8 · Critical EPSS 3,6%

Kerentanan Improper Neutralization of Escape, Meta, or Control Sequences pada blackberry qnx software development platform. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.

Rincian

Terbit di NVD

12 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

EPSS (30 hari)

3,6% peluang dieksploitasi; lebih tinggi dari 89,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://support.blackberry.com/kb/articleDetail?articleNumber=000061411 advisory vendor