CVE-2020-12010: Advantech Webaccess

High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days.

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control.

Affected products

• Advantech Webaccess: up to and including 8.4.4; version 9.0.0 only

Published 2020-05-08. Last modified 2026-06-17.