Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4774

Опубликовано: 12 окт. 2020
Источник: nvd
CVSS3: 5.4
CVSS3: 5.4
CVSS2: 5.5
EPSS Низкий

Описание

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:curam_social_program_management:7.0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:curam_social_program_management:7.0.10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00109
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-91

Связанные уязвимости

github
больше 3 лет назад

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.

EPSS

Процентиль: 30%
0.00109
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-91