6.5

CVE-2020-9915

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iCloud SwPlatformwindows Version < 7.20
Apple ≫ iCloud SwPlatformwindows Version >= 11.0 < 11.3
Apple ≫ iTunes SwPlatformwindows Version < 12.10.8
Apple ≫ Safari Version < 13.1.2
Apple ≫ iPadOS Version < 13.6
Apple ≫ iPhone OS Version < 13.6
Apple ≫ tvOS Version < 13.4.8
Apple ≫ watchOS Version < 6.2.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.63% 0.694
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
https://support.apple.com/HT211288
Vendor Advisory
Release Notes
https://support.apple.com/HT211290
Vendor Advisory
Release Notes
https://support.apple.com/HT211291
Vendor Advisory
Release Notes
https://support.apple.com/HT211292
Vendor Advisory
Release Notes
https://support.apple.com/HT211293
Vendor Advisory
Release Notes
https://support.apple.com/HT211294
Vendor Advisory
Release Notes
https://support.apple.com/HT211295
Vendor Advisory
Release Notes