CVE-2020-9761: Unctad Asycuda World

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called.

Affected products

• Unctad Asycuda World: from 2001, up to and including 2020

Published 2020-03-04. Last modified 2026-06-17.