Paper/Archive/CVE-2020-4693

CVE-2020-4693

IBM Spectrum Protect Operations Center — IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary co…

EPSS 3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 85.0.850 × 2017.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.

Affected

ProductAffectedFixed inSource

Spectrum Protect Operations Center7.1.0.000–CNA

Spectrum Protect Operations Center8.1.0.000–CNA

Spectrum Protect Operations Center7.1.10–CNA

Spectrum Protect Operations Center8.1.9–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ibm (CNA)9.1CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C

References

refibm.com/support/pages/node/6325341 refexchange.xforce.ibmcloud.com/vulnerabilities/186782