CVE-2020-5398: netapp data_availability_services Cross-site Scripting
CVSS: 8.0v3.0HighModified
AliasesUBUNTU-CVE-2020-5398CGA-24xr-q2f9-h4gwCGA-4725-pwgc-qw8xCGA-4846-74p9-6925CGA-8px3-mh9w-v57cCGA-98fc-99hv-wwpfCGA-gpv5-52qf-8wm6CGA-h557-4p9f-c9c2CGA-j8qf-h5p2-jjx2CGA-m75g-q6qv-fvfjGHSA-8wx2-9q48-vm9rCGA-r4hx-xg64-cw8vCGA-rw3c-fhwr-f76jCGA-wg76-f3x9-pqv2
Published 16-01-2020Last modified 08-10-2026
Vulnerability summary
CVE-2020-5398 is a high (CVSS 8.0) Cross-site Scripting vulnerability in netapp data_availability_services. EPSS estimates a 88.77% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities.
CVSS score
8.0/10
010
High · v3.0 (CVE.org)EPSS score
88.77%
0%100%
Critical · +0.37 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 2Timeline
- 16-01-2020PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
CVSS metrics
8 scores · 5 sources · 3 versionsHigh 7.5Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · MavenEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
High 8.0Preferred score · CVE.org (CNA)
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.0HighCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
- NVDNIST8.0HighCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
High 7.6Preferred score · NVD (NIST)
AV:N/AC:H/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
88.77%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
+0.37 pp
From 88.40% on 18-09-2026
18-09-202618-10-2026
EPSS score88.77%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
- CWE-494Download of Code Without Integrity CheckThe product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
Affected systems
Oracle30 products
- application_testing_suite13.3.0.1
- communications_billing_and_revenue_management_elastic_charging_engine11.3 | 12.0
- communications_cloud_native_core_policy1.5.0
- communications_diameter_signaling_router≥ 8.0.0, ≤ 8.2.2
- communications_element_manager8.1.1 | 8.2.0 | 8.2.1
Chainguard6 products
- mysql-8.0< 8.0.38-r0
- mysql-8.0-client< 8.0.38-r0
- mysql-8.0-dev< 8.0.38-r0
- mysql-8.0-iamguarded-compat< 8.0.38-r0
- mysql-8.0-oci-entrypoint< 8.0.38-r0
Netapp2 products
Org.springframework2 products
- spring-webflux≥ 5.2.0.RELEASE, < 5.2.3.RELEASE | ≥ 5.1.0.RELEASE, < 5.1.13.RELEASE | ≥ 5.0.0.RELEASE, < 5.0.16.RELEASE
- spring-webmvc≥ 5.2.0.RELEASE, < 5.2.3.RELEASE | ≥ 5.1.0.RELEASE, < 5.1.13.RELEASE | ≥ 5.0.0.RELEASE, < 5.0.16.RELEASE
Spring1 product
- spring framework≥ 5.0, < v5.0.16.RELEASE | ≥ 5.1, < v5.1.13.RELEASE | ≥ 5.2, < v5.2.3.RELEASE
Ubuntu1 product
- libspring-javaAll versions (No fix recorded)
Vmware1 product
- spring_framework≥ 5.0.0, < 5.0.16 | ≥ 5.1.0, < 5.1.13 | ≥ 5.2.0, < 5.2.3
7 vendors · 43 products
