{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-09T17:35:41", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://seclists.org/fulldisclosure/2020/Sep/22"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-25259", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://seclists.org/fulldisclosure/2020/Sep/22", "refsource": "MISC", "url": "https://seclists.org/fulldisclosure/2020/Sep/22"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T15:33:05.331Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://seclists.org/fulldisclosure/2020/Sep/22"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-25259", "datePublished": "2020-09-11T02:19:03", "dateReserved": "2020-09-11T00:00:00", "dateUpdated": "2024-08-04T15:33:05.331Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*", "matchCriteriaId": "8676658E-9F96-4213-9062-119274A085A4", "versionEndIncluding": "16.0.2.83", "vulnerable": true}, {"criteria": "cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*", "matchCriteriaId": "46DE98EF-38B4-4C32-8FF1-54D1733771AC", "versionEndIncluding": "17.0.2.109", "versionStartIncluding": "17.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*", "matchCriteriaId": "CFEE664C-014B-4B42-8DA2-86617D8E279E", "versionEndIncluding": "18.0.0.37", "versionStartIncluding": "18.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*", "matchCriteriaId": "78E72BFC-F30C-45FF-9253-2CF1FF633B82", "versionEndIncluding": "19.8.16.1000", "versionStartIncluding": "19.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*", "matchCriteriaId": "966A05D7-1D0A-4618-9DFC-8F1A062D3DC6", "versionEndIncluding": "20.3.10.1000", "versionStartIncluding": "20.0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Hyland OnBase versi\u00f3n16.0.2.83 e inferiores, versi\u00f3n 17.0.2.109 e inferiores, versi\u00f3n 18.0.0.37 e inferiores, versi\u00f3n 19.8.16.1000 e inferiores y versi\u00f3n 20.3.10.1000 e inferiores. Utiliza las bibliotecas de deserializaci\u00f3n XML de manera insegura"}], "id": "CVE-2020-25259", "lastModified": "2024-11-21T05:17:47.603", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-09-11T03:15:13.097", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://seclists.org/fulldisclosure/2020/Sep/22"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://seclists.org/fulldisclosure/2020/Sep/22"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}