CVE-2020-4640

4.1 mediumEPSS 0.4%

Medium (4.1) in ibm api connect. EPSS 0.4% chance of exploitation in the next 30 days.

Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make use of this information to perform attacks by impersonating a user. IBM X-Force ID: 185510.

Severity

CVSS 3.1

4.1 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2021-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:api_connect

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/185510
https://www.ibm.com/support/pages/node/6410486
https://exchange.xforce.ibmcloud.com/vulnerabilities/185510
https://www.ibm.com/support/pages/node/6410486

Check your stack JSON