1. Home
  2. CVE Database
  3. CVE-2020-9055
LOW · 3.9

CVE-2020-9055

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is store...

Vulnerability Description

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

CVSS Score

3.9

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
VersiantLynx Customer Service Portal3.5.2

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2020-9055?

CVE-2020-9055 is a vulnerability with a CVSS score of 3.9 (LOW). Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is store...

How severe is CVE-2020-9055?

CVE-2020-9055 has been rated LOW with a CVSS base score of 3.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9055?

Check the references section above for vendor advisories and patch information. Affected products include: Versiant Lynx Customer Service Portal.