CVE-2020-7850: Douzone Nbbdownloader.ocx

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

• Douzone Nbbdownloader.ocx: up to and including 1.0.0.12

Published 2021-03-29. Last modified 2026-06-17.