CVE-2020-7865

Publication date

2021-09-07 14:46:16

Family

krcert

State

PUBLISHED

Description

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system.