CVE-2020-11431: Inetsoftware Clear Reports

Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days.

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal.

Affected products

• Inetsoftware Clear Reports: from 16.0, up to and including 19.2
• Inetsoftware Helpdesk: from 8.0, up to and including 8.3
• Inetsoftware Pdfc: from 4.3, up to and including 6.2

Published 2020-05-07. Last modified 2026-06-17.