CVE-2020-25020 in Primavera Unifier

Summary

MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

08/29/2020

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
168178	Oracle Primavera Unifier MPXJ xml external entity reference	611	Not defined	Official fix	CVE-2020-25020
160433	MPXJ GanttProjectReader/PhoenixReader xml external entity reference	611	Not defined	Not defined	CVE-2020-25020

Sources

• MITRE
• NVD
• CVE Details