Friday, September 11, 2020
CVE-2020-25254
nist.gov
In: nist.gov
An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It allows SQL injection, as demonstrated by TestConnection_LocalOrLinkedServer, CreateFilterFriendlyView, or AddWorkViewLinkedServer. CVE-2020-25254