Medium severity4.3NVD Advisory· Published Jan 28, 2020· Updated Jun 17, 2026

CVE-2019-4637

Description

IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 170043.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Secret Server
cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*
Range: <10.7.000059
IBM/IBM Security Secret Serverllm-fuzzy2 versions
<10.7+ 1 more
- (no CPE)range: <10.7
- (no CPE)range: 10.7

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/1283242nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/170043nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000