CVE-2020-4974

MEDIUM

IBM Jazz Foundation - Authenticated Server-Side Request Forgery

Title source: llm
STIX 2.1

Description

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6475919
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/192434

Scores

CVSS v3 6.3
EPSS 0.0060
EPSS Percentile 44.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-918
Status published
Products (25)
ibm/engineering_lifecycle_optimization_-_engineering_insights 7.0
ibm/engineering_lifecycle_optimization_-_engineering_insights 7.0.1
ibm/engineering_lifecycle_optimization_-_engineering_insights 7.0.2
ibm/engineering_requirements_quality_assistant_on-premises
ibm/engineering_test_management 7.0.0
ibm/engineering_test_management 7.0.1
ibm/engineering_test_management 7.0.2
ibm/engineering_workflow_management 7.0
ibm/engineering_workflow_management 7.0.1
ibm/engineering_workflow_management 7.0.2
... and 15 more
Published Jul 28, 2021
Tracked Since Feb 18, 2026