CVE-2020-13183: Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to

Q: How do I fix CVE-2020-13183?

pcoip management console: upgrade to 20.07. Exact commands for each OS are on this page.

Q: Is CVE-2020-13183 being exploited?

CVE-2020-13183 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2020-13183 affect?

CVE-2020-13183 affects pcoip management console. Severity is medium (CVSS 6.1). Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.

Q: How urgent is CVE-2020-13183?

Priority 34/100. No elevated risk signals yet.

Routine

MEDIUM 6.1UPGRADE

CVE-2020-13183 is a medium-severity flaw (CVSS 6.1) affecting pcoip management console. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.1 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.6% (top 49%)
CISA exploited list	No
Weakness	CWE-79
Published	2020-08-17
Last modified	2026-06-17

Publisher (CNA): Teradici Corporation · Vendor: teradici

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2020-08-17 21:15 UTCPublished CVE record published
2026-06-17 02:52 UTCUpdated Record last modified

teradici pcoip management console UPGRADE

Affected: < 20.07

Fixed in: 20.07

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy pcoip-management-console || rpm -q pcoip-management-console || pcoip-management-console --version

2. UPGRADE to 20.07 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade pcoip-management-console

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade pcoip-management-console

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2020-13183?

pcoip management console: upgrade to 20.07. Exact commands for each OS are on this page.

Is CVE-2020-13183 being exploited?

CVE-2020-13183 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2020-13183 affect?

CVE-2020-13183 affects pcoip management console. Severity is medium (CVSS 6.1). Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.

How urgent is CVE-2020-13183?

Priority 34/100. No elevated risk signals yet.

Related CVEs

CVE-2021-35451 MEDIUM 6.1 DOWNGRADE In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text int
CVE-2020-13174 MEDIUM 6.1 DOWNGRADE The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-
CVE-2020-10965 HIGH 8.1 DOWNGRADE Teradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password resets via log
CVE-2017-20121 HIGH 7.8 DOWNGRADE A vulnerability was found in Teradici Management Console 2.2.0

References

← Back to latest CVEs