CVE-2020-10372: Ramp Altimeter

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI.

Affected products

• Ramp Altimeter: before 2.4.0 (fixed in 2.4.0)

Published 2020-03-10. Last modified 2026-06-17.