CVEs published October 15, 2020
50 CVEs were published on October 15, 2020: 5 critical, 10 high.
- Published
- 50
- Critical
- 5
- High
- 10
- Medium
- 23
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 30
Most affected products
- Pepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- 5
- SAP SE SAP 3D Visual Enterprise Viewer
- 5
- B&R GateManager
- 4
- F2fs-Tools
- 4
- Siemens Desigo Insight
- 3
- B&R SiteManager
- 2
- IBM Security Verify Access · IBM Security Access Manager
- 2
- Qualcomm QCMAP
- 2
- SAP SE SAP Commerce Cloud
- 2
- SAP SE SAP NetWeaver Application Server Java
- 2
Critical 5
- CVE-2020-12504Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- CVE-2020-12501Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- CVE-2020-12500Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- CVE-2020-27156Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks.
- CVE-2020-6364SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a coSAP SE SAP Solution Manager (CA Introscope Enterprise Manag…
High 10
- CVE-2020-12503Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- CVE-2020-12502Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productsPepperl+Fuchs P+F Comtrol RocketLinx · Korenix JetNet +1
- CVE-2020-11642SiteManager Denial of Service via Local File Inclusion VulnerabilityB&R SiteManager
- CVE-2020-11641SiteManager Local File Inclusion VulnerabilityB&R SiteManager
- CVE-2020-6105An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13.F2fs-Tools
- CVE-2020-6108An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13.F2fs-Tools
- CVE-2020-4499IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or alIBM Security Verify Access · IBM Security Access Manager
- CVE-2020-7334Improper privilege assignment vulnerability in the installer component of MACCMcAfee Application and Change Control
- CVE-2020-27157Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were pro
- CVE-2020-27153In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c.
Medium, low and unrated 35
- CVE-2020-14185Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActioAtlassian Jira Server
- CVE-2019-17640In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, The Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-web
- CVE-2020-1777Agent names disclosed in chat featureOTRS AG OTRS
- CVE-2020-7591A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).Siemens SIPORT MP
- CVE-2020-15794A vulnerability has been identified in Desigo Insight (All versions).Siemens Desigo Insight
- CVE-2020-15792A vulnerability has been identified in Desigo Insight (All versions).Siemens Desigo Insight
- CVE-2020-15793A vulnerability has been identified in Desigo Insight (All versions).Siemens Desigo Insight
- CVE-2020-25859The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validatinQualcomm QCMAP
- CVE-2020-25858The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return valQualcomm QCMAP
- CVE-2020-11637Automation Runtime TFTP Service DoS VulnerabilityB&R Automation Runtime
- CVE-2020-11646GateManager Log Information Disclosure VulnerabilityB&R GateManager
- CVE-2020-11645GateManager Denial of Service VulnerabilityB&R GateManager
- CVE-2020-21674Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a
- CVE-2020-11644GateManager Audit Message Spoofing VulnerabilityB&R GateManager
- CVE-2020-11643GateManager Information Disclosure VulnerabilityB&R GateManager
- CVE-2020-6106An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13.F2fs-Tools
- CVE-2020-6104An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13.F2FS-Tools
- CVE-2020-6107An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13.F2fs-Tools
- CVE-2019-4552IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks.IBM Security Verify Access · IBM Security Access Manager
- CVE-2020-7744Information Exposurecom.mintegral.msdk:alphab
- CVE-2020-7327McAfee MVEDR - Improperly implemented security checkMcAfee MVISION Endpoint Detection and Response
- CVE-2020-7326McAfee MAR - Improperly implemented security checkMcAfee Active Response
- CVE-2020-5642Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the onWebChat Live Chat - Live support
- CVE-2020-6365SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirectSAP SE SAP NetWeaver Application Server Java
- CVE-2020-6376SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file received from untrusted sSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6374SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sourcSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6375SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm) file received from uSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6373SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6372SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6371User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaverSAP SE SAP NetWeaver Application Server ABAP
- CVE-2020-6368SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing themSAP SE SAP Business Planning and Consolidation
- CVE-2020-6363SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user.SAP SE SAP Commerce Cloud
- CVE-2020-6319SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated attacker to includeSAP SE SAP NetWeaver Application Server Java
- CVE-2020-6272SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorizedSAP SE SAP Commerce Cloud
- CVE-2020-6323SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and SAP SE SAP NetWeaver Enterprise Portal