Ibm Resilient Onprem vulnerabilities

CVE-2021-29780 [MEDIUM] CWE-20 CVE-2021-29780: IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.

CVE-2021-20527 [HIGH] CWE-77 CVE-2021-20527: IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759.

CVE-2020-4864 [MEDIUM] CWE-290 CVE-2020-4864: IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567.

CVE-2020-4636 [HIGH] CWE-77 CVE-2020-4636: IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.