CVE-2020-4337
CVE-2020-4337
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.
CVSS:3.0/I:H/AV:N/PR:N/A:N/UI:R/AC:L/S:U/C:N/RC:C/E:U/RL:O
Affected products
IBM · API ConnectWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →