Skip to content
OpenAdvisories

Archive

June 2020

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-2021 Exploited · Ransomware Public exploit

    PAN-OS: Authentication Bypass in SAML Authentication

    When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-base…

    KEV Mar 25, 2022
  • Medium 6.3
    CVE-2020-13965 Exploited Public exploit EPSS 77%

    An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

    KEV Jun 26, 2024
  • High 7.5
    CVE-2020-5410 Exploited Public exploit EPSS 96%

    Directory Traversal with spring-cloud-config-server

    Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send …

    KEV Mar 25, 2022