What’s Vulnerable › Vulnerabilities

CVE-2020-13877

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-12 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.

Affected products

• Resourcexpress Meeting Monitor: 4.9

References

• https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/807698439/v1.8+HF+1+2+3+OnPrem+v5.3
• https://www.resourcexpress.com/news/
• https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/807698439/v1.8+HF+1+2+3+OnPrem+v5.3
• https://www.resourcexpress.com/news/

Get alerted when CVE-2020-13877 or the next vulnerability affects your stack