CVE-2020-8995

CRITICAL 9.8CVE-2020-8995 · Published 21/12/2020 · updated 17/06/2026

In short

CVE-2020-8995 is a CRITICAL (CVSS 9.8) vulnerability affecting bilanc (bilanc).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bilanc bilanc	`≤ 014_31.01.2020`	No fix yet

Description

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

References

seclists.org/fulldisclosure/2020/Dec/38 · Mailing List
packetstormsecurity.com/files/160626/Programi-Bilanc-Build-007-Release-014-31.01.2020-Hardcoded-Credentials.html · Third Party Advisory

More vulnerabilities in bilanc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bilanc

≤ 014_31.01.2020

No fix yet

More vulnerabilities in bilanc

See all →