CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2020-6950
Medium (6.5). EPSS 10% chance of exploitation in the next 30 days. Fixed in org.glassfish:mojarra-parent 2.3.14.
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
Severity
- EPSS
- 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eclipse:mojarra
- oracle:banking_enterprise_default_management
- oracle:banking_platform
- oracle:communications_network_integrity
- oracle:communications_pricing_design_center
- oracle:hyperion_calculation_manager
- oracle:retail_merchandising_system
- oracle:solaris_cluster
- oracle:time_and_labor
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rpq8-mmwh-q9hm | Maven | org.glassfish:mojarra-parent | <2.3.14 | 2.3.14 |