CVE-2020-20012

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
May 23, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-20028.1An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS bCVE-2020-200217.5An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemonCVE-2020-20036.5An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary CVE-2020-20045.5Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubCVE-2020-20056.1A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN CVE-2020-20068.8A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated user to potentially exCVE-2020-200678.8File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.CVE-2020-20077.2An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitCVE-2020-200706.1Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameteCVE-2020-20087.2An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to eCVE-2020-20097.2An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administCVE-2020-200929.8File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and pla
CVE-2020-20012: Critical severity, CVSS 9.8 | Vulnix