CVE-2009-20005: Intersystems Corporation Intersystems Caché

Critical severity, CVSS 9.3. EPSS: 1.7% chance of exploitation in the next 30 days.

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.

Affected products

• Intersystems Corporation Intersystems Caché: up to and including 2009.1

Published 2025-09-16. Last modified 2026-10-01.