cveboard RSS feed

CVE-2020-28387

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2020
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). When opening a specially crafted SEECTCXML file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external dtd. (ZDI-CAN-11923)

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Solid Edge SE2020

Vendor
Siemens
Product
Solid Edge SE2020
Platforms
Unknown
Default status
Unknown
Solid Edge SE2020 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All Versions < SE2020MP13affectedUnavailableUnavailableUnavailableNone listed

Solid Edge SE2021

Vendor
Siemens
Product
Solid Edge SE2021
Platforms
Unknown
Default status
Unknown
Solid Edge SE2021 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All Versions < SE2021MP3affectedUnavailableUnavailableUnavailableNone listed