Vulnerability Details CVE-2020-4811
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.0%
CVSS Severity
CVSS v3 Score 2.4
CVSS v2 Score 4.0
References
Products affected by CVE-2020-4811
-
cpe:2.3:a:ibm:cloud_pak_for_security:1.4.0.0
-
cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.0
-
cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.1
-
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.0.0
-
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.0.1