CVE-2020-28859

6.1 mediumEPSS 0.8%

Medium (6.1) in openasset digital asset management. EPSS 0.8% chance of exploitation in the next 30 days.

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-12-14
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

openasset:digital_asset_management

References

https://www.themissinglink.com.au/security-advisories-cve-2020-28859
https://www.themissinglink.com.au/security-advisories-cve-2020-28859

Check your stack JSON