6.8
CVSSv2

CVE-2020-14425

Published: 02/11/2020 Updated: 12/11/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Foxit Reader prior to 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

foxitsoftware foxit reader

Exploits

Foxit Reader version 971 suffers from a remote command execution vulnerability ...