CVE-2020-4612medium

CVE-2020-4612: medium-severity vulnerability in IBM Data Risk Manager

Published · Updated

Follow this CVE+ Monitor Data Risk Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 1.3%
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.
CVSS:3.0/A:N/UI:N/I:N/PR:L/AV:N/S:U/C:L/AC:L/RL:O/E:U/RC:C
Affected products
IBM · Data Risk Manager
Related CVEs — IBM Data Risk Manager

In the same product, most dangerous first.

CVE-2020-4427CRITICALCVE-2020-4427EPSS 70.0%KEVCVE-2020-4430MEDIUMCVE-2020-4430EPSS 68.5%KEVCVE-2020-4428CRITICALCVE-2020-4428EPSS 61.7%KEVCVE-2020-4429CRITICALCVE-2020-4429EPSS 72.0%CVE-2020-4620HIGHCVE-2020-4620EPSS 5.2%CVE-2020-4616MEDIUMCVE-2020-4616EPSS 1.7%