CVE-2020-4772

An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10

High · published October 12, 2020

CVSS v3.0
7.1
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AC:L/I:N/C:H/S:U/UI:N/PR:L/A:L/AV:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.01464 · 73.4th percentile
Published
2020-10-12T13:05Z
EPSS history
Timeline
  • 12 OCT 13:05Z
    An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
    cvelistv5