CVE-2020-7959

5.3 mediumEPSS 1.4%

Medium (5.3) in labvantage labvantage. EPSS 1.4% chance of exploitation in the next 30 days.

LabVantage LIMS 8.3 does not properly maintain the confidentiality of database names. For example, the web application exposes the database name. An attacker might be able to enumerate database names by providing his own database name in a request, because the response will return an 'Unrecognized Database exception message if the database does not exist.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2020-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

labvantage:labvantage

References

https://github.com/websecnl/LabVantage8.3-Exploit
https://www.exploit-db.com/exploits/48090
https://github.com/websecnl/LabVantage8.3-Exploit
https://www.exploit-db.com/exploits/48090

Check your stack JSON