CVE-2020-4693
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.
IBM Spectrum Protect Operations Center versiones 7.1.0.000 hasta 7.1.10 y versiones 8.1.0.000 hasta 8.1.9, puede permitir a un atacante ejecutar código arbitrario en el sistema, causado por una comprobación inapropiada de los datos antes de la exportación. IBM X-Force ID: 186782
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-12-30 CVE Reserved
- 2020-09-02 CVE Published
- 2024-09-17 CVE Updated
- 2024-10-12 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/186782 | 2020-09-10 | |
| https://www.ibm.com/support/pages/node/6325341 | 2020-09-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 7.1.0.000 <= 7.1.10.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 7.1.0.000 <= 7.1.10.000" | - |
Affected
| in | Ibm Search vendor "Ibm" | Aix Search vendor "Ibm" for product "Aix" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 7.1.0.000 <= 7.1.10.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 7.1.0.000 <= 7.1.10.000" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 7.1.0.000 <= 7.1.10.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 7.1.0.000 <= 7.1.10.000" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 8.1.0.000 <= 8.1.9.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 8.1.0.000 <= 8.1.9.000" | - |
Affected
| in | Ibm Search vendor "Ibm" | Aix Search vendor "Ibm" for product "Aix" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 8.1.0.000 <= 8.1.9.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 8.1.0.000 <= 8.1.9.000" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Operations Center Search vendor "Ibm" for product "Spectrum Protect Operations Center" | >= 8.1.0.000 <= 8.1.9.000 Search vendor "Ibm" for product "Spectrum Protect Operations Center" and version " >= 8.1.0.000 <= 8.1.9.000" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|