CVE-2019-4461

5.4 mediumEPSS 0.6%

Medium (5.4) in ibm cloud orchestrator. EPSS 0.6% chance of exploitation in the next 30 days.

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain sensitive information. IBM X-Force ID: 163682.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2019-10-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cloud_orchestrator

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/163682
https://www.ibm.com/support/pages/node/1072684
https://exchange.xforce.ibmcloud.com/vulnerabilities/163682
https://www.ibm.com/support/pages/node/1072684

Check your stack JSON