CVE-2020-25255: High severity hyland onbase vulnerability
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote attackers to cause a denial of service (outage of connection-request processing) via a long user ID, which triggers an exception and a large log entry.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25255?
CVE-2020-25255 has a moderate severity rating, primarily due to its potential to cause denial of service.
How do I fix CVE-2020-25255?
To fix CVE-2020-25255, update Hyland OnBase to a version above the specified vulnerable versions.
Which versions of Hyland OnBase are affected by CVE-2020-25255?
CVE-2020-25255 affects Hyland OnBase versions 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below, and 20.3.10.1000 and below.
What type of vulnerability is CVE-2020-25255?
CVE-2020-25255 is a denial-of-service vulnerability that can be exploited via a long user ID input.
Can CVE-2020-25255 be exploited remotely?
Yes, CVE-2020-25255 can be exploited remotely by attackers to cause an outage of connection-request processing.