CVE-2020-4428

IBM Data Risk Manager Remote Code Execution Vulnerability
61.7%
EPSS
99%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

Vendor
IBM
Product
Data Risk Manager
Added to KEV
Nov 3, 2021
Remediation due
May 3, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-78
EPSS
61.7% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded