CVE-2020-28898: Resourcexpress

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.

Affected products

• Resourcexpress Resourcexpress: up to and including 4.9k

Published 2021-04-15. Last modified 2026-06-17.