CVE-2020-4617: IBM Data Risk Manager

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 184930.

Affected products

• IBM Data Risk Manager: before 2.0.6.4 (fixed in 2.0.6.4)

Published 2020-09-22. Last modified 2026-06-17.