https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-9354.htmlhttps://patchthecve.com/cve/CVE-2020-9354.htmlWed, 17 Jun 2026 03:27:48 +0000HIGH 7.5: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. pathttps://patchthecve.com/cve/CVE-2020-9353.htmlhttps://patchthecve.com/cve/CVE-2020-9353.htmlWed, 17 Jun 2026 03:27:48 +0000HIGH 7.5: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL is affected by unauthenticated Local File Inclusion via directory-traversal sequences in the elem XML https://patchthecve.com/cve/CVE-2020-9352.htmlhttps://patchthecve.com/cve/CVE-2020-9352.htmlWed, 17 Jun 2026 03:27:48 +0000CRITICAL 9.8: An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. NOTE: the documentation states "These tools are, by defahttps://patchthecve.com/cve/CVE-2020-9351.htmlhttps://patchthecve.com/cve/CVE-2020-9351.htmlWed, 17 Jun 2026 03:27:48 +0000MEDIUM 5.3: An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the _transaction parameter, the server replies with a verbose error showing where the application resides (the a