← back
CVE-2020-4648

CVE-2020-4648

CVSS 6.5 MEDIUMEPSS 0.9%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.9%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
19 Aug 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019.
CVSS:3.0/C:N/UI:N/PR:L/I:H/S:U/AV:N/AC:L/A:N/RL:O/E:U/RC:C
Affected products
IBM · Planning Analytics