CVE-2020-25268

8.8 highEPSS 2.4%

High (8.8) in ilias ilias. EPSS 2.4% chance of exploitation in the next 30 days.

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.

Severity

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-88
Published: 2020-11-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19