CVE-2020-4726

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-922

Affected software

Vendor	Product	Versions
IBM	Cloud APM	8.1.4

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/187975VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6417137Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/187975VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6417137Patch, Vendor Advisory

Timeline

Published: Mar 2, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-47276.1IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to CVE-2020-47295.3IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.0 CVE-2020-47316.1IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c CVE-2020-47326.5IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security r CVE-2020-47335.4IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t CVE-2020-47397.8IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1,CVE-2020-47405.2IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which w CVE-2020-47415.4IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbit CVE-2020-47479.8IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to im CVE-2020-47486.1IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip CVE-2020-47494.3IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able CVE-2020-47555.4IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip