CVE-2019-20635 - codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields

MEDIUM

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields

Published Apr 2, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.88%

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.

No remediation recorded yet.

Weaknesses (1)

CWE-470

https://codebeamer.com/cb/wiki/7372223
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://codebeamer.com/cb/wiki/7372223		x_refsource_MISCRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 2, 2020

Updated Aug 5, 2024

Reserved Apr 2, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a