{"vulnerability": "CVE-2020-2718", "sightings": [{"uuid": "f7f73fb7-229a-41b3-86d9-a91ab304da52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27180", "type": "seen", "source": "https://t.me/cibsecurity/15598", "content": "\u203c CVE-2020-27180 \u203c\n\nkonzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T11:29:50.000000Z"}, {"uuid": "9c8b6cf4-760f-4cf7-9f37-bc7f843d336f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27182", "type": "seen", "source": "https://t.me/cibsecurity/15600", "content": "\u203c CVE-2020-27182 \u203c\n\nMultiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaScript or HTML via appletError.jsp, job_jacket_detail.jsp, ixedit/editor_component.jsp, or the login form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T11:29:52.000000Z"}, {"uuid": "b4303756-b055-43a2-9c90-16582d280adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27183", "type": "seen", "source": "https://t.me/cibsecurity/15601", "content": "\u203c CVE-2020-27183 \u203c\n\nA RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send arbitrary e-mails, escalate the privileges of arbitrary user accounts, and have unspecified other impact.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T11:29:54.000000Z"}]}