CVE-2020-11626: XSS
Published Apr 7, 2020
·Updated
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting (XSS) vulnerabilities have been found in the Public Web and the Certificate/CRL download servlets.
Affected Software
2 affected components
PrimeKey EJBCA<6.15.2.6
PrimeKey EJBCA>=7.0.0<7.3.1.2
Event History
Apr 7, 2020
CVE Published
via MITRE·11:34 PM
Data Sourced
via MITRE·11:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11626?
CVE-2020-11626 is classified as a medium severity vulnerability due to potential Cross Site Scripting (XSS) attacks.
2
How do I fix CVE-2020-11626?
To fix CVE-2020-11626, upgrade EJBCA to version 6.15.2.6 or 7.3.1.2 or later.
3
What software is affected by CVE-2020-11626?
CVE-2020-11626 affects EJBCA versions prior to 6.15.2.6 and 7.x prior to 7.3.1.2.
4
What type of vulnerabilities does CVE-2020-11626 contain?
CVE-2020-11626 contains two Cross Site Scripting (XSS) vulnerabilities.
5
When was CVE-2020-11626 disclosed?
CVE-2020-11626 was disclosed in 2020 as part of security updates for EJBCA.