IBM Cloud App Management vulnerabilities

3 CVEs affecting IBM Cloud App Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-4751, published 2020-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1990, published 2019-05-10. Medium severity, CVSS 5.3. EPSS: 2.3% chance of exploitation in the next 30 days. IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283.
CVE-2019-4751, published 2020-04-24. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacker further information about the implementation of the offering. IBM X-Force ID:…
CVE-2019-4750, published 2020-04-24. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the…