CVE-2018-20663: Haulmont Cuba Platform

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.

Affected products

• Haulmont Cuba Platform: up to and including 6.10.7
• Haulmont Reporting: up to and including 2019-01-02

Published 2019-01-03. Last modified 2026-06-17.