IBM Rational Asset Manager vulnerabilities

2 CVEs affecting IBM Rational Asset Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4820, published 2022-09-29.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-4820, published 2022-09-29. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences.
• CVE-2011-4708, published 2011-12-08. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.