Vulnerability in Ibm Cognos Controller
CVE-2020-4877
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.
EPSS: 0.004 (58.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.0/I:L/UI:N/AV:N/AC:L/A:L/C:L/S:U/PR:N/RC:C/E:U/RL:O.
Affected products
- Ibm Cognos Controller — versions 10.4.0, 10.4.1, 10.4.2
References
- www.ibm.com/support/pages/node/6509856 (x_refsource_CONFIRM)
- ibm-cognos-cve20204877-priv-escalation (190843) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2020-4877?
- CVE-2020-4877 is a high-severity vulnerability in Ibm Cognos Controller. CVSS score: 7.3/10. Published 2022-01-21.
- How severe is CVE-2020-4877?
- High severity. CVSS v3 base score is 7.3 out of 10.