CVE-2020-11814: Qdpm

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.

Affected products

• Qdpm Qdpm: version 9.1 only

Published 2020-04-16. Last modified 2026-06-17.