CVE-2020-9055: Versiant Lynx Customer Service Portal

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

Affected products

• Versiant Lynx Customer Service Portal: version 3.5.2 only

Published 2020-03-30. Last modified 2026-06-17.