CVE-2020-4774

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-12 · updated 2026-06-17
Weakness: CWE-91

Description

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.

Affected products

IBM Curam SPM: 7.0.9.0, 7.0.10.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/189152
https://www.ibm.com/support/pages/node/6346595
https://exchange.xforce.ibmcloud.com/vulnerabilities/189152
https://www.ibm.com/support/pages/node/6346595

Get alerted when CVE-2020-4774 or the next vulnerability affects your stack