IBM InfoSphere Metadata Asset Manager vulnerabilities

2 CVEs affecting IBM InfoSphere Metadata Asset Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4632, published 2020-09-04.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1994, published 2019-04-10. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or…
• CVE-2020-4632, published 2020-09-04. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to…