# CVEs published 2020-12-12

6 CVEs were published on December 12, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-35207](https://cve.now/CVE-2020-35207.md): An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. (no CVSS)
- [CVE-2020-35208](https://cve.now/CVE-2020-35208.md): An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. (no CVSS)
- [CVE-2020-35199](https://cve.now/CVE-2020-35199.md): Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS. (no CVSS)
- [CVE-2020-35200](https://cve.now/CVE-2020-35200.md): Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS. (no CVSS)
- [CVE-2020-35202](https://cve.now/CVE-2020-35202.md): Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. (no CVSS)
- [CVE-2020-35201](https://cve.now/CVE-2020-35201.md): Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.