CVE-2020-4695

CVSS 5.9 MEDIUMEPSS 0.8%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.9EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Mar 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.

CVSS:3.0/AC:H/UI:N/PR:N/I:N/AV:N/S:U/A:N/C:H/RL:O/RC:C/E:U

Affected products

IBM · API Connect

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/186788 https://www.ibm.com/support/pages/node/6426707