CVE-2020-4430
IB
IBM Data Risk Manager
IBM Data Risk Manager Directory Traversal Vulnerability
What it is
IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other IBM entries on the list
- Aspera Faspex IBM Aspera Faspex Incorrect Authorization Vulnerability CVE-2026-123218 · Nov 9, 2026
- Langflow IBM Langflow Code Injection Vulnerability CVE-2026-9198 · Aug 4, 2026
- Aspera Faspex IBM Aspera Faspex Code Execution Vulnerability CVE-2022-47986 · Feb 21, 2023
- InfoSphere BigInsights IBM InfoSphere BigInsights Invalid Input Vulnerability CVE-2013-3993 · May 25, 2022
- WebSphere Application Server and Server Hypervisor Edition IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 · Jan 10, 2022
- Data Risk Manager IBM Data Risk Manager Remote Code Execution Vulnerability CVE-2020-4428 · Nov 3, 2021