← volver
CVE-2020-4773

CVE-2020-4773

CVSS 6.5 MEDIUMEPSS 0.6%
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.6%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
12 oct 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no impact to remainder of web application. IBM X-Force ID: 189151.
CVSS:3.0/C:N/S:U/UI:R/AC:L/I:H/A:N/AV:N/PR:N/E:U/RC:C/RL:O
Productos afectados
IBM · Curam SPM