CVE-2020-4828

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by…

Medium · published February 4, 2021

CVSS v3.0
6.5
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 189842.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/C:L/PR:N/UI:N/AC:L/I:L/A:N/S:U/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Published
2021-02-04T16:55Z
EPSS history
Timeline
  • 04 FEB 16:55Z
    IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by…
    cvelistv5