QwikSec

Security Database

CVE

CWE

Training

CVE-2020-7480

Published: Mar 23, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.

Vendor	Product	Versions
n/a	Andover Continuum (All versions)	affected `Andover Continuum (All versions)`

Weaknesses (CWE)

References

https://www.se.com/ww/en/download/document/SEVD-2020-070-04/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.