Yworks

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yworks records in CISA KEV

No Yworks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Yed · all components

TI-2020-15457 CVE-2020-25216 · GHSA-vmh6-vv2c-7hw5

MEDIUM 47

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02424 Published 2020-09-17 No fix listed CWE-91

TI-2020-15456 CVE-2020-25215 · GHSA-pgr7-wppm-2gmp

MEDIUM 44

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2020-09-17 No fix listed CWE-611