VDB

CVE-2020-14484

CVE-2020-14484 PUBLISHED CVSS 9.800000190734863 CRITICAL

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks.

EPSS 1.24% · 69.0th percentile

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.24%
69.0th percentile

Affected Products

VendorProductVersions
openclinic_ga_projectopenclinic_ga5.09.02, 5.89.05b
n/aOpenClinic GAVersions 5.09.02 and 5.89.05b

Timeline

  • Jul 20, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Dec 30, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 6, 2022 EPSS Score
  • Sep 10, 2022 EPSS Score
  • Nov 13, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›