Read the docs
TI-2020-09734 Aliases CVE-2020-12083GHSA-24jf-233j-q8x3

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x…

Priority MEDIUM 44Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).

Why it matters now

EPSS 0.00967 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:flexera:flexnet_code_insight:*:*:*:*:*:*:*:*7.0.0 – 7.11.0-64VulnerableFlexera
  • cpe:2.3:a:flexera:flexnet_code_insight:*:*:*:*:*:*:*:* Versions 7.0.0 – 7.11.0-64 Vulnerable ·Flexera

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-12083
  2. 2026-10-03 Alias added: GHSA-24jf-233j-q8x3

References

Advisory 1

  • TI-2020-09733 A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight… CVSS 3.1MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences