CVE-2020-4470

—

CVSS 3.1

8.0 high

EPSS

2%p79

Published

Jun 15, 2020 (Jun 15, 2020)

Modified

Jun 17, 2026

Description

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.

Vendors: ibm
Products: spectrum protect plus
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.