CVE-2020-25258: Critical severity hyland onbase vulnerability
Published Sep 11, 2020
·Updated
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses ASP.NET BinaryFormatter.Deserialize in a manner that allows attackers to transmit and execute bytecode in SOAP messages.
Affected Software
5 affected components
Hyland Onbase<=16.0.2.83
Hyland Onbase>=17.0.0.0<=17.0.2.109
Hyland Onbase>=18.0.0.0<=18.0.0.37
Hyland Onbase>=19.0.0.0<=19.8.16.1000
Hyland Onbase>=20.0.0.0<=20.3.10.1000
Event History
Sep 11, 2020
CVE Published
via MITRE·02:19 AM
Data Sourced
via MITRE·02:19 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-25258?
The severity of CVE-2020-25258 is rated as critical with a CVSS score of 9.8.
2
How does CVE-2020-25258 impact Hyland OnBase?
CVE-2020-25258 allows attackers to transmit and execute bytecode in SOAP messages in Hyland OnBase versions 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below, and 20.3.10.1000 and below.