# CVEs published 2020-06-26

104 CVEs were published on June 26, 2020: 0 critical, 14 high. Days are UTC.

- [CVE-2020-4089](https://cve.now/CVE-2020-4089.md): HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. (no CVSS, HCL Notes)
- [CVE-2020-9577](https://cve.now/CVE-2020-9577.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9576](https://cve.now/CVE-2020-9576.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-3809](https://cve.now/CVE-2020-3809.md): Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-3796](https://cve.now/CVE-2020-3796.md): ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. (no CVSS, Adobe ColdFusion)
- [CVE-2020-9588](https://cve.now/CVE-2020-9588.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing d (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9578](https://cve.now/CVE-2020-9578.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9631](https://cve.now/CVE-2020-9631.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9630](https://cve.now/CVE-2020-9630.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9591](https://cve.now/CVE-2020-9591.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth sec (no CVSS, Adobe Magento · magento/community-edition +1)
- [CVE-2020-9632](https://cve.now/CVE-2020-9632.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9580](https://cve.now/CVE-2020-9580.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-3768](https://cve.now/CVE-2020-3768.md): ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. (no CVSS, Adobe ColdFusion)
- [CVE-2020-9581](https://cve.now/CVE-2020-9581.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9582](https://cve.now/CVE-2020-9582.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9583](https://cve.now/CVE-2020-9583.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9587](https://cve.now/CVE-2020-9587.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypas (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9584](https://cve.now/CVE-2020-9584.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-9579](https://cve.now/CVE-2020-9579.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation (no CVSS, Adobe Magento · magento/community-edition +1)
- [CVE-2020-9585](https://cve.now/CVE-2020-9585.md): Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth sec (no CVSS, Adobe Magento · magento/community-edition +2)
- [CVE-2020-3767](https://cve.now/CVE-2020-3767.md): ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. (no CVSS, Adobe ColdFusion)
- [CVE-2020-9574](https://cve.now/CVE-2020-9574.md): Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9572](https://cve.now/CVE-2020-9572.md): Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9570](https://cve.now/CVE-2020-9570.md): Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9573](https://cve.now/CVE-2020-9573.md): Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9571](https://cve.now/CVE-2020-9571.md): Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9563](https://cve.now/CVE-2020-9563.md): Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9564](https://cve.now/CVE-2020-9564.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9557](https://cve.now/CVE-2020-9557.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge)
- [CVE-2020-9556](https://cve.now/CVE-2020-9556.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9560](https://cve.now/CVE-2020-9560.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9561](https://cve.now/CVE-2020-9561.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9555](https://cve.now/CVE-2020-9555.md): Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9562](https://cve.now/CVE-2020-9562.md): Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9553](https://cve.now/CVE-2020-9553.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge)
- [CVE-2020-9559](https://cve.now/CVE-2020-9559.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-3798](https://cve.now/CVE-2020-3798.md): Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2020-9554](https://cve.now/CVE-2020-9554.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9565](https://cve.now/CVE-2020-9565.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9566](https://cve.now/CVE-2020-9566.md): Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9569](https://cve.now/CVE-2020-9569.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9568](https://cve.now/CVE-2020-9568.md): Adobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9567](https://cve.now/CVE-2020-9567.md): Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. (CVSS 7.8, Adobe Bridge)
- [CVE-2020-9558](https://cve.now/CVE-2020-9558.md): Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge)
- [CVE-2020-9627](https://cve.now/CVE-2020-9627.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9628](https://cve.now/CVE-2020-9628.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9625](https://cve.now/CVE-2020-9625.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9623](https://cve.now/CVE-2020-9623.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9622](https://cve.now/CVE-2020-9622.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9629](https://cve.now/CVE-2020-9629.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9624](https://cve.now/CVE-2020-9624.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9621](https://cve.now/CVE-2020-9621.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9586](https://cve.now/CVE-2020-9586.md): Adobe Character Animator versions 3.2 and earlier have a buffer overflow vulnerability. (no CVSS, Adobe Character Animator)
- [CVE-2020-9620](https://cve.now/CVE-2020-9620.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9590](https://cve.now/CVE-2020-9590.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9616](https://cve.now/CVE-2020-9616.md): Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Premiere Pro)
- [CVE-2020-9617](https://cve.now/CVE-2020-9617.md): Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Premiere Rush)
- [CVE-2020-9589](https://cve.now/CVE-2020-9589.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2020-9626](https://cve.now/CVE-2020-9626.md): Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. (no CVSS, Adobe DNG Software Development Kit)
- [CVE-2013-7489](https://cve.now/CVE-2013-7489.md): The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution. (no CVSS, beaker)
- [CVE-2020-15351](https://cve.now/CVE-2020-15351.md): IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\\IDriveWindows with weak folder permissions granting any user mo (no CVSS)
- [CVE-2020-9047](https://cve.now/CVE-2020-9047.md): exacqVision Software - Improper Verification of Cryptographic Signature (CVSS 6.8, Johnson Controls exacqVision Web Service versions 20.03.2.0…)
- [CVE-2020-14955](https://cve.now/CVE-2020-14955.md): In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspec (no CVSS)
- [CVE-2020-11996](https://cve.now/CVE-2020-11996.md): A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could t (no CVSS, Apache Tomcat · tomcat +2)
- [CVE-2020-10624](https://cve.now/CVE-2020-10624.md): ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network. (no CVSS, ControlEdge PLC · ControlEdge RTU)
- [CVE-2020-14477](https://cve.now/CVE-2020-14477.md): Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel (CVSS 3.6, Philips Ultrasound ClearVue · Philips Ultrasound CX +3)
- [CVE-2020-13891](https://cve.now/CVE-2020-13891.md): An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. (no CVSS)
- [CVE-2020-10628](https://cve.now/CVE-2020-10628.md): ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network. (no CVSS, ControlEdge PLC · ControlEdge RTU)
- [CVE-2020-10727](https://cve.now/CVE-2020-10727.md): A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plain (no CVSS, Red Hat ActiveMQ Artemis · org.apache.activemq:artemis-comm…)
- [CVE-2020-10769](https://cve.now/CVE-2020-10769.md): A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto\_authenc\_extractkeys in crypto/authenc.c in the IPsec Cryptograp (no CVSS, Kernel)
- [CVE-2020-15332](https://cve.now/CVE-2020-15332.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions. (no CVSS)
- [CVE-2020-15333](https://cve.now/CVE-2020-15333.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select \* from Administrator\_users" and "select \* (no CVSS)
- [CVE-2020-15334](https://cve.now/CVE-2020-15334.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file. (no CVSS)
- [CVE-2020-15335](https://cve.now/CVE-2020-15335.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests. (no CVSS)
- [CVE-2020-15336](https://cve.now/CVE-2020-15336.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests. (no CVSS)
- [CVE-2020-15337](https://cve.now/CVE-2020-15337.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests. (no CVSS)
- [CVE-2020-15338](https://cve.now/CVE-2020-15338.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests. (no CVSS)
- [CVE-2020-15339](https://cve.now/CVE-2020-15339.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle\_campaign\_script\_link?script\_name= XSS. (no CVSS)
- [CVE-2020-15340](https://cve.now/CVE-2020-15340.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default\_axess/axess/TR69/Handlers/turbolink/sshkeys/id\_rsa SSH (no CVSS)
- [CVE-2020-15341](https://cve.now/CVE-2020-15341.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update\_all\_realm\_license API. (no CVSS)
- [CVE-2020-15342](https://cve.now/CVE-2020-15342.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy\_install\_user API. (no CVSS)
- [CVE-2020-15343](https://cve.now/CVE-2020-15343.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy\_install\_user\_key API. (no CVSS)
- [CVE-2020-15344](https://cve.now/CVE-2020-15344.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy\_get\_user\_id\_and\_key API. (no CVSS)
- [CVE-2020-15345](https://cve.now/CVE-2020-15345.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy\_get\_instances\_for\_update API. (no CVSS)
- [CVE-2020-15346](https://cve.now/CVE-2020-15346.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key. (no CVSS)
- [CVE-2020-15347](https://cve.now/CVE-2020-15347.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account. (no CVSS)
- [CVE-2020-15325](https://cve.now/CVE-2020-15325.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication. (no CVSS)
- [CVE-2020-15326](https://cve.now/CVE-2020-15326.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem. (no CVSS)
- [CVE-2020-15327](https://cve.now/CVE-2020-15327.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication. (no CVSS)
- [CVE-2020-15328](https://cve.now/CVE-2020-15328.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions. (no CVSS)
- [CVE-2020-15329](https://cve.now/CVE-2020-15329.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions. (no CVSS)
- [CVE-2020-15330](https://cve.now/CVE-2020-15330.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP\_KEY in /opt/axess/etc/default/axess. (no CVSS)
- [CVE-2020-15331](https://cve.now/CVE-2020-15331.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH\_SECRET\_KEY in /opt/axess/etc/default/axess. (no CVSS)
- [CVE-2020-15348](https://cve.now/CVE-2020-15348.md): Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete\_cpes\_by\_ids?cpe\_ids= for eval injection of (no CVSS)
- [CVE-2020-4565](https://cve.now/CVE-2020-4565.md): IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure communications being (CVSS 5.9, IBM Spectrum Protect Plus)
- [CVE-2020-4223](https://cve.now/CVE-2020-4223.md): IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Maximo Asset Management)
- [CVE-2019-4650](https://cve.now/CVE-2019-4650.md): IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. (CVSS 6.3, IBM Maximo Asset Management)
- [CVE-2020-15016](https://cve.now/CVE-2020-15016.md): NeDi 1.9C is vulnerable to reflected cross-site scripting. (no CVSS)
- [CVE-2020-15017](https://cve.now/CVE-2020-15017.md): NeDi 1.9C is vulnerable to reflected cross-site scripting. (no CVSS)
- [CVE-2020-15308](https://cve.now/CVE-2020-15308.md): Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site\_edit.php typeid or site param (no CVSS)
- [CVE-2020-15304](https://cve.now/CVE-2020-15304.md): An issue was discovered in OpenEXR before 2.5.2. (no CVSS)
- [CVE-2020-15305](https://cve.now/CVE-2020-15305.md): An issue was discovered in OpenEXR before 2.5.2. (no CVSS)
- [CVE-2020-15306](https://cve.now/CVE-2020-15306.md): An issue was discovered in OpenEXR before v2.5.2. (no CVSS)
- [CVE-2020-10753](https://cve.now/CVE-2020-10753.md): A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). (CVSS 5.4, Red Hat Ceph Storage)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.