CVE-2020-4719

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-02 · updated 2026-06-17
Weakness: CWE-706

Description

The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.

Affected products

IBM Cloud APM: 8.1.4

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/187861
https://www.ibm.com/support/pages/node/6417137
https://exchange.xforce.ibmcloud.com/vulnerabilities/187861
https://www.ibm.com/support/pages/node/6417137

Get alerted when CVE-2020-4719 or the next vulnerability affects your stack