What is CVE-2019-20383?

CVE-2019-20383 is a high-severity vulnerability in Abbyy Finereader, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2020-08-13.

How severe is CVE-2019-20383?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Abbyy Finereader

CVE-2019-20383

ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations involving files and using symbolic links.

Published 2020-08-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.005 (39.1th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 39.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Abbyy Finereader

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log (Release Notes, Vendor Advisory)
amonitoring.ru/article/abbyy-lpe/ (Exploit, Third Party Advisory)
www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.263… (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2019-20383?: CVE-2019-20383 is a high-severity vulnerability in Abbyy Finereader, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2020-08-13.
How severe is CVE-2019-20383?: High severity. CVSS v3 base score is 7.8 out of 10.