CVE-2020-4490

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-29 · updated 2026-06-17

Description

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989

Affected products

IBM Business Automation Workflow: 18.0.0.0, 19.0.0.0
IBM Business Process Manager: 8.0.0.0, 8.5.0.0, 8.6.0.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/181989
https://www.ibm.com/support/pages/node/6217550
https://exchange.xforce.ibmcloud.com/vulnerabilities/181989
https://www.ibm.com/support/pages/node/6217550

Get alerted when CVE-2020-4490 or the next vulnerability affects your stack