Skip to content
Sign in
6.1 Medium

CVE-2020-4820 IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting

Description

IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Cloud Pak for Security 1.4.0.0 No fix stated

Other CVEs of Cloud Pak for Security

The 55 CVEs of Cloud Pak for Security →
CVE-2025-25020 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 6.5 Medium CVE-2025-1334 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows… 4.0 Medium CVE-2025-25021 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 7.2 High CVE-2025-25022 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 9.6 Critical
Track this CVE