CVE-2020-4638

—

CVSS 3.1

7.2 high

EPSS

2%p76

Published

Sep 3, 2020 (Sep 3, 2020)

Modified

Jun 17, 2026

Description

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.

Vendors: ibm
Products: api connect
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.