CVE-2020-22790

概要

参考情報

• community.safe.com/s/article/FME-Server-Stored-Cross-Site-Scripting-XSS-Vulnerabilities · Vendor Advisory
• community.safe.com/s/article/fme-server-2019-security-update · Vendor Advisory
• mexicanpentester.com/2020/04/09/vulnerabilities-in-fme-server-versions-2019-2-and-2020-0-beta-and-probably-previous-versions · Exploit

fme server のその他の脆弱性

• CVE-2023-35801高 8.1A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a netwo…
• CVE-2022-38340高 7.2Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedata…
• CVE-2022-38339中 6.1Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to exec…
• CVE-2022-38341高 7.1Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
• CVE-2022-38342中 6.5Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows a…