Detections
Analytics
CVE-2020-11586
critical
Description
An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.
References
https://www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/