CVSS 3.1
6.2 mediumCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2019-4038
Medium (6.2) in ibm security identity manager. EPSS 0.4% chance of exploitation in the next 30 days.
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:security_identity_manager