Skip to main content
All vulnerabilities
CVE-2020-4428

IBM Data Risk Manager Remote Code Execution Vulnerability

IBMData Risk Manager

Added to KEV catalog
3 November 2021
Federal remediation due date
3 May 2022
Weakness classification (CWE)
CWE-78

CISA Description

IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-4428

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services