CVE Watch—

CVE-2020-4430

IBM Data Risk Manager Directory Traversal Vulnerability

CVSS

—

No CVSS

EPSS

68.5%

p99

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

68.5%EPSS · 30 days68.5%

2026-06-302026-07-16

KEV catalog record

Product

IBM / Data Risk Manager

Vulnerability

IBM Data Risk Manager Directory Traversal Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-4430

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-4427—

99.3%

KEV—80IBM Data Risk Manager Security Bypass Vulnerability—CVE-2020-4428—

99.1%

KEV—80IBM Data Risk Manager Remote Code Execution Vulnerability—