CVE-2020-9437

4.8
MEDIUMCVSS v3.1 Base Score
0.98%
LOW RiskEPSS (61st percentile)
CWE-79

SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.

Published: 6/25/2020
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

4.8MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v2 Score

3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS Score (Exploitation Probability)

0.98%LOW Exploitation Risk
61st percentile

This vulnerability has a 0.98% probability of being exploited in the next 30 days, ranking higher than 61% of all scored CVEs.

CWE Classification

CWE-79

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

Advertisement