CVE-2020-4337 — IBM API Connect vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 58.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM API Connect
Timeline
PublishedSep 3
Latest updateMay 24

Description

IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/api_connect2018.4.1.0 — 2018.4.1.12
▶CVEListV5ibm/api_connect2018.4.1.0, 2018.4.1.12+1

🔴Vulnerability Details

2
GHSA
GHSA-3f78-8xp5-2p5j: IBM API Connect 2018↗2022-05-24
▶
CVEList
CVE-2020-4337: IBM API Connect 2018↗2020-09-03
▶
CVE-2020-4337 — IBM API Connect vulnerability | cvebase