CVE-2020-25259: Critical severity hyland onbase vulnerability
Published Sep 11, 2020
·Updated
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner.
Affected Software
5 affected components
Hyland Onbase<=16.0.2.83
Hyland Onbase>=17.0.0.0<=17.0.2.109
Hyland Onbase>=18.0.0.0<=18.0.0.37
Hyland Onbase>=19.0.0.0<=19.8.16.1000
Hyland Onbase>=20.0.0.0<=20.3.10.1000
Event History
Sep 11, 2020
CVE Published
via MITRE·02:19 AM
Data Sourced
via MITRE·02:19 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-25259?
The severity of CVE-2020-25259 is critical with a CVSS score of 9.8.
2
Which versions of Hyland OnBase are affected by CVE-2020-25259?
Hyland OnBase versions 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below, and 20.3.10.1000 and below are affected by CVE-2020-25259.
3
What is the vulnerability type of CVE-2020-25259?
The vulnerability type of CVE-2020-25259 is unsafe XML deserialization.
4
How can I fix CVE-2020-25259?
To fix CVE-2020-25259, it is recommended to upgrade Hyland OnBase to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2020-25259?
You can find more information about CVE-2020-25259 at https://seclists.org/fulldisclosure/2020/Sep/22.