What’s Vulnerable › Vulnerabilities

CVE-2021-20527

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-19 · updated 2026-06-17
• Weakness: CWE-77

Description

IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759.

Affected products

• IBM Corporation Resilient: before 38.2.41; from 39.0 before 39.0.6536; from 39.1 before 39.1.46; from 39.2.17 before 39.2.21; from 40.0.6554 before 40.0.6556; from 40.1.50 before 40.1.51 — fixed in 38.2.41, 39.0.6536, 39.1.46, 39.2.21, 40.0.6556, 40.1.51

How to fix

Upgrade to a fixed version: IBM Corporation Resilient 38.2.41, 39.0.6536, 39.1.46, 39.2.21. Check the vendor advisory for mitigations.

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/198759
• https://www.ibm.com/support/pages/node/6444747
• https://exchange.xforce.ibmcloud.com/vulnerabilities/198759
• https://www.ibm.com/support/pages/node/6444747

Get alerted when CVE-2021-20527 or the next vulnerability affects your stack