Vulnerability identifier: #VU27084

Vulnerability risk: High

CVSSv3.1: 8.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C]

CVE-ID: CVE-2020-4428

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 2

• May 5, 2020
  • IBM Data Risk Manager Unauthenticated Remote Code Execution [Metasploit]
• April 22, 2020
  • Multiple Vulnerabilities in IBM Data Risk Manager [Custom exploits]

Impact: Code execution

Vulnerable software:
IBM Data Risk Manager
Web applications / Other software

Vendor: IBM Corporation