Resilient SOAR
by IBM
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-4633 | Hig | 0.57 | 8.8 | 0.03 | Dec 11, 2020 | IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation. | ||
| CVE-2021-20566 | Hig | 0.49 | 7.5 | 0.01 | Jun 16, 2021 | IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238. | ||
| CVE-2021-20527 | Hig | 0.47 | 7.2 | 0.01 | Apr 19, 2021 | IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759. | ||
| CVE-2020-4635 | Med | 0.35 | 5.3 | 0.01 | Mar 19, 2021 | IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames. | ||
| CVE-2021-20567 | Med | 0.29 | 4.4 | 0.00 | Jun 16, 2021 | IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239. | ||
| CVE-2020-4864 | Med | 0.28 | 4.3 | 0.00 | Oct 29, 2020 | IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567. | ||
| CVE-2019-4579 | Med | 0.28 | 4.3 | 0.01 | Aug 28, 2020 | IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236. |
- risk 0.57cvss 8.8epss 0.03
IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.
- risk 0.49cvss 7.5epss 0.01
IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238.
- risk 0.47cvss 7.2epss 0.01
IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759.
- risk 0.35cvss 5.3epss 0.01
IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames.
- risk 0.29cvss 4.4epss 0.00
IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239.
- risk 0.28cvss 4.3epss 0.00
IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567.
- risk 0.28cvss 4.3epss 0.01
IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236.