CVE-2019-4741

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF)

Medium · published February 12, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/I:L/C:N/AV:N/A:N/S:U/PR:N/UI:N/AC:L/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00962 · 61.3th percentile
Published
2020-02-12T16:10Z
EPSS history
Timeline
  • 12 FEB 16:10Z
    IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF)
    cvelistv5