CVE-2020-4337

IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails…

Medium · published September 3, 2020

CVSS v3.0
6.5
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/I:H/AV:N/PR:N/A:N/UI:R/AC:L/S:U/C:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01051 · 64.0th percentile
Published
2020-09-03T13:55Z
EPSS history
Timeline
  • 03 SEP 13:55Z
    IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails…
    cvelistv5