CVE-2019-4420

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 162738.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-209

Affected software

Vendor	Product	Versions
IBM	Intelligent Operations Center	5.1.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.0.4; 5.1.0.5; 5.1.0.6; 5.1.0.7; 5.1.0.8; 5.1.0.9; 5.1.0.10; 5.1.0.11; 5.1.0.12; 5.1.0.13; 5.1.0.14; 5.2.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/162738VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10956429Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/162738VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10956429Vendor Advisory

Timeline

Published: Aug 20, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-44228.8IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the acce CVE-2019-44235.3IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could sen CVE-2019-44248.2IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE CVE-2019-44255.7IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another use CVE-2019-44265.4The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripti CVE-2019-44277.5IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algor CVE-2019-44285.4IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users t CVE-2019-44295.4IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc CVE-2019-44307.5IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-craf CVE-2019-44315.4IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J CVE-2019-44338.2IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity In CVE-2019-44375.3IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X