IBM MAAS360 vulnerabilities

2 CVEs affecting IBM MAAS360, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4353, published 2020-04-23.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-4735, published 2020-04-23. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outside of the container. IBM X-Force ID: 172705.
• CVE-2020-4353, published 2020-04-23. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricted applications and device settings. IBM X-Force ID: 178505.