IBM Case Manager vulnerabilities

4 CVEs affecting IBM Case Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4768, published 2021-02-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1884, published 2018-11-12. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal…
CVE-2015-1979, published 2015-07-20. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted…
CVE-2019-4426, published 2019-12-13. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2020-4768, published 2021-02-11. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…