CVE-2019-4461

—

CVSS 3.1

5.4 medium

EPSS

<1%p45

Published

Oct 25, 2019 (Oct 25, 2019)

Modified

Jun 17, 2026

Description

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain sensitive information. IBM X-Force ID: 163682.

Vendors: ibm
Products: cloud orchestrator
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.