CVE-2020-4285

State
Published
Severity
7.8 High
Published
May 14, 2020
Updated
Sep 16, 2024
Reserved
Dec 30, 2019

Read the record on cve.org

Description

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176266

Scores

CVSSScoreVectorSource
3.07.8 HighCVSS:3.0/I:H/AC:L/A:H/PR:N/C:H/S:U/UI:R/AV:L/RC:C/RL:O/E:Uibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
i2 Analysts NotebookIBM
  • 9.2.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.