CVE-2018-20687: Raritan Commandcenter Secure Gateway

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Affected products

• Raritan Commandcenter Secure Gateway: before 8.0.0 (fixed in 8.0.0)

Published 2019-11-18. Last modified 2026-06-17.