CVE-2020-7008

7.5 highEPSS 1.9%

High (7.5) in visam. EPSS 1.9% chance of exploitation in the next 30 days.

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2020-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

visam:vbase_editor
visam:vbase_web-remote

References

https://www.us-cert.gov/ics/advisories/icsa-20-084-01
https://www.us-cert.gov/ics/advisories/icsa-20-084-01

Check your stack JSON