CVE-2020-4703

8.0 highEPSS 1.8%

High (8.0) in ibm spectrum protect plus. EPSS 1.8% chance of exploitation in the next 30 days.

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. This vulnerability is due to an incomplete fix for CVE-2020-4470. IBM X-Force ID: 187188.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2020-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:spectrum_protect_plus

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/187188
https://www.ibm.com/support/pages/node/6328867
https://exchange.xforce.ibmcloud.com/vulnerabilities/187188
https://www.ibm.com/support/pages/node/6328867

Check your stack JSON