Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-14519

24
FAUCET Score

CVE-2020-14519 is a high-severity vulnerability affecting Wibu CodeMeter versions prior to 7.00, and newer versions with the WebSockets API enabled. It allows an unauthenticated attacker to manipulate or create license files through a specially crafted JavaScript payload targeting the internal WebSockets API. With a CVSS score of 7.5, this vulnerability has a network attack vector and low attack complexity, leading to high integrity impact. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 7.00CPE matchmatch criteria
cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.64%
Probability of exploitation in next 30 days
EPSS Percentile
46.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0064 is in the 23rd percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

amazonvendor investigatingvia llm_extracted
apollographqlvendor investigatingvia llm_extracted
dfinityvendor investigatingvia llm_extracted
fleetdmvendor investigatingvia llm_extracted
mathworksvendor investigatingvia llm_extracted

Vendor Advisories (5)

fleetdmllm-fleetdm-ce3414dafcd3ec60CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
amazonllm-amazon-64bced238e9d2a3aCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
apollographqlllm-apollographql-fd74a7b0a4a6838bCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
dfinityllm-dfinity-c853f523c559648fCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
mathworksllm-mathworks-e88e9e16d61f6d98CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020

References

us-cert.cisa.gov / ics/advisories/icsa-20-203-01
Third Party AdvisoryUS Government Resource