Vulnerability Details CVE-2020-15865
A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.068
EPSS Ranking 90.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2020-15865
-
cpe:2.3:a:stimulsoft:reports:2013.1.1600.0