https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-13652.htmlhttps://patchthecve.com/cve/CVE-2020-13652.htmlWed, 17 Jun 2026 02:53:30 +0000MEDIUM 6.1: An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting (XSS) vulnerability exists in the login menu.https://patchthecve.com/cve/CVE-2020-13651.htmlhttps://patchthecve.com/cve/CVE-2020-13651.htmlWed, 17 Jun 2026 02:53:30 +0000HIGH 7.8: An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client wihttps://patchthecve.com/cve/CVE-2020-13650.htmlhttps://patchthecve.com/cve/CVE-2020-13650.htmlWed, 17 Jun 2026 02:53:30 +0000HIGH 7.5: An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery (SSRF) that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to a