CVE-2020-6856

6.5 mediumEPSS 0.9%

Medium (6.5) in sos-berlin jobscheduler. EPSS 0.9% chance of exploitation in the next 30 days.

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-776
Published: 2020-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sos-berlin:jobscheduler

References

https://change.sos-berlin.com/browse/JOC-853
https://change.sos-berlin.com/browse/JOC-853

Check your stack JSON