Application Inspector

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-0872 Mar 12, 16:15 CRITICAL PATCH Act Now

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Microsoft Application Inspector

NVD

CVSS 3.1

9.6

EPSS

9.9%

CVE-2020-0872

EPSS 10% CVSS 9.6

CRITICAL PATCH Act Now

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Microsoft +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy