CVE-2020-15952: Immuta

Critical severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days.

Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based XSS.

Affected products

• Immuta Immuta: version 2.8.2 only

Published 2020-11-05. Last modified 2026-06-17.