CVE-2020-4470

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute…

High · published June 15, 2020

CVSS v3.0
7.1
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/A:H/I:H/UI:R/S:U/C:H/PR:L/AC:H/AV:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01911 · 79.6th percentile
Published
2020-06-15T13:25Z
EPSS history
Timeline
  • 15 JUN 13:25Z
    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute…
    cvelistv5