CVE-2020-6590

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-66098.8GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-66106.5GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.CVE-2020-66116.5GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66128.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.CVE-2020-66138.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66148.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66156.5GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).CVE-2020-66166.5Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situCVE-2020-66178.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.CVE-2020-66188.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.CVE-2020-66198.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.CVE-2020-66208.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
CVE-2020-6590: High severity, CVSS 7.5 | Vulnix