CVE-2020-4222
33Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 15%
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091.
CVSS:3.0/AV:N/I:H/UI:N/C:H/AC:L/PR:N/A:H/S:U/RL:O/RC:C/E:U
Affected products
IBM · Spectrum Protect Plus