Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-13574
HistoryFeb 10, 2021 - 8:15 p.m.

CVE-2020-13574

2021-02-1020:15:14
CWE-476
[email protected]
web.nvd.nist.gov
5
ws-security plugin
soap request
http request
genivia gsoap

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.7%

JSON

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

Affected configurations

Nvd
Node
geniviagsoapMatch2.8.107
Node
fedoraprojectfedoraMatch33
OR
fedoraprojectfedoraMatch34
VendorProductVersionCPE
geniviagsoap2.8.107cpe:2.3:a:genivia:gsoap:2.8.107:*:*:*:*:*:*:*
fedoraprojectfedora33cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
fedoraprojectfedora34cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Related

ubuntucve 1
gitlab 1
cvelist 1
cve 1
prion 1
debiancve 1
talos 1
veracode 1
openvas 4
fedora 2
mageia 1
osv 1
nessus 2
debian 1
ibm 1
ubuntucve
ubuntucve
CVE-2020-13574
2021-02-10 00:00:00
gitlab
gitlab
NULL Pointer Dereference
2021-02-10 00:00:00
cvelist
cvelist
CVE-2020-13574
2021-02-10 00:00:00
cve
cve
CVE-2020-13574
2021-02-10 20:15:14
prion
prion
Cross site request forgery (csrf)
2021-02-10 20:15:00
debiancve
debiancve
CVE-2020-13574
2021-02-10 20:15:14
talos
talos
Genivia gSOAP WS-Security plugin denial-of-service vulnerability
2021-01-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-03-09 21:46:51
openvas
openvas
Debian: Security Advisory (DLA-3745-1)
2024-03-01 00:00:00
Fedora: Security Advisory for gsoap (FEDORA-2021-faea36a9c3)
2021-03-17 00:00:00
Fedora: Security Advisory for gsoap (FEDORA-2021-1da151722e)
2021-03-20 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: gsoap-2.8.104-4.fc34
2021-03-19 20:30:39
[SECURITY] Fedora 33 Update: gsoap-2.8.104-4.fc33
2021-03-17 02:18:38
mageia
mageia
Updated gsoap packages fix security vulnerabilities
2021-06-16 23:22:25
osv
osv
gsoap - security update
2024-02-29 00:00:00
nessus
nessus
Fedora 33 : gsoap (2021-faea36a9c3)
2021-03-17 00:00:00
Debian dla-3745 : gsoap - security update
2024-03-01 00:00:00
debian
debian
[SECURITY] [DLA 3745-1] gsoap security update
2024-02-29 23:53:40
ibm
ibm
Security Bulletin: Genivia gSOAP vulnerabilities affect IBM Spectrum Protect for Virtual Environments:Data Protection for VMware and Spectrum Protect Client (CVE-2020-13575, CVE-2020-13578, CVE-2020-13574, CVE-2020-13577, CVE-2020-13576, CVE-2020-21783)
2021-06-15 01:00:14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.7%

JSON
Related for NVD:CVE-2020-13574
ubuntucve1gitlab1cvelist1cve1prion1debiancve1talos1veracode1openvas4fedora2mageia1osv1nessus2debian1ibm1