Yed

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-25216 CRITICAL Act Now

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Yed

NVD

CVSS 3.1

9.8

EPSS

2.4%

CVE-2020-25215 CRITICAL Act Now

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Yed

NVD

CVSS 3.1

9.8

EPSS

1.2%

CVE-2020-25216

EPSS 2% CVSS 9.8

CRITICAL Act Now

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Yed

NVD

CVE-2020-25215

EPSS 1% CVSS 9.8

CRITICAL Act Now

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Yed

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy