CVE-2020-4811

IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a…

Low · published May 14, 2021

CVSS v3.0
2.4
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation.

The record
Technical detail
CVSS v3.0
2.4 · LOW
Vector
CVSS:3.0/AV:N/A:N/C:N/S:U/PR:H/UI:R/I:L/AC:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.6th percentile
Published
2021-05-14T16:15Z
EPSS history
Timeline
  • 14 MAY 16:15Z
    IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a…
    cvelistv5