CVE-2020-4292
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.7epss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
CVSS:3.0/C:L/S:U/PR:N/AV:N/UI:N/AC:H/A:N/I:N/RC:C/RL:O/E:U
Affected products
IBM · Security Information Queue