openvpn openvpn-access-server CVE-2020-11462 is a vulnerability in Openvpn Access Server
Published on May 4, 2020

An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion (XEE) payload to the XMLRPC based RPC2 interface. The duration of the DoS state depends on available memory and CPU speed. The default restricted mode of the RPC2 interface is NOT vulnerable.

NVD


Products Associated with CVE-2020-11462

Want to know whenever a new CVE is published for Openvpn Access Server? stack.watch will email you.

 

Exploit Probability

EPSS
0.39%
Percentile
59.64%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.