CVE

CVE-2020-11975

9.8

CVSS

Description

Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process.

Attack Vector

Privileges Req.

User Interaction

apache unomi

Updated Oct 23, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2020-11975 Scanner

CVE-2020-11975 Scanner - Remote Code Execution (RCE) vulnerability in Apache Unomi

Used 2.2k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →