IBM Resilient Security Orchestration Automation And Response vulnerabilities

10 CVEs affecting IBM Resilient Security Orchestration Automation And Response, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29802, published 2021-08-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4633, published 2020-12-11. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.
CVE-2020-4636, published 2020-10-16. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.
CVE-2019-4533, published 2020-08-28. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.
CVE-2019-4579, published 2020-08-28. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force…
CVE-2021-20566, published 2021-06-16. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238.
CVE-2021-29704, published 2021-08-23. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2021-29780, published 2021-07-19. Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.
CVE-2021-29802, published 2021-08-23. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
CVE-2020-4864, published 2020-10-29. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567.
CVE-2021-20567, published 2021-06-16. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239.