CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.9. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-9055
Severity
LOW
CVSS
3.9
EPSS
0.51%
Java
Original NVD Description
Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.