CVE-2021-20482high

CVE-2021-20482: high-severity vulnerability in IBM Cloud Pak for Automation

Published · Updated

Follow this CVE+ Monitor Cloud Pak for Automation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 1.4%
IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197504.
CVSS:3.0/S:U/PR:L/I:N/AC:L/UI:N/A:L/AV:N/C:H/E:U/RL:O/RC:C
Affected products
IBM · Cloud Pak for Automation
Related CVEs — IBM Cloud Pak for Automation

In the same product, most dangerous first.

CVE-2021-20359MEDIUMCVE-2021-20359EPSS 1.3%CVE-2021-38900MEDIUMCVE-2021-38900EPSS 1.2%CVE-2021-29775MEDIUMCVE-2021-29775EPSS 0.9%CVE-2021-29751LOWCVE-2021-29751EPSS 0.9%CVE-2021-20358MEDIUMCVE-2021-20358EPSS 0.8%CVE-2021-29872MEDIUMCVE-2021-29872EPSS 0.8%