CVE-2020-4633

IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation

Medium · published December 11, 2020

CVSS v3.0
6.8
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/UI:R/S:U/PR:L/C:H/I:L/AC:L/AV:N/A:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.02866 · 86.7th percentile
Published
2020-12-11T14:20Z
EPSS history
Timeline
  • 11 DEC 14:20Z
    IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation
    cvelistv5