What’s Vulnerable › Vulnerabilities
CVE-2020-11431
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-05-07 · updated 2026-06-17
- Weakness: CWE-22
Description
The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal.
Affected products
- Inetsoftware Clear Reports: from 16.0 through 19.2
- Inetsoftware Helpdesk: from 8.0 through 8.3
- Inetsoftware Pdfc: from 4.3 through 6.2
References
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_19.2
- https://www.inetsoftware.de/support/news/i-net-clear-reports-security-advisory-2020-apr-06
- https://www.inetsoftware.de/support/news/i-net-helpdesk-sicherheitsankuendigung-2020-apr-06
- https://www.inetsoftware.de/support/news/i-net-pdfc-security-advisory-2020-apr-06
- https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_19.2
- https://www.inetsoftware.de/support/news/i-net-clear-reports-security-advisory-2020-apr-06
- https://www.inetsoftware.de/support/news/i-net-helpdesk-sicherheitsankuendigung-2020-apr-06
- https://www.inetsoftware.de/support/news/i-net-pdfc-security-advisory-2020-apr-06
Get alerted when CVE-2020-11431 or the next vulnerability affects your stack