{"id":"CVE-2020-4693","aliases":["EUVD-2020-25940","GHSA-8qjw-wjp9-mh9g"],"status":"published","title":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may...","description":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02538,"percentile":0.85077,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-09-02T18:25:25Z","modified":"2026-06-17T03:20:22Z","products":[{"vendor":"ibm","product":"spectrum protect operations center"},{"vendor":"ibm","product":"spectrum_protect_operations_center"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6325341","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186782","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4693"},{"url":"https://github.com/advisories/GHSA-8qjw-wjp9-mh9g"}],"sources":{"cve":[{"id":"CVE-2020-4693","description":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.","status":"published","published":"2020-09-02T18:25:25.686Z","modified":"2024-09-17T03:07:44.052Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:35:55.460269Z"}],"euvd":[{"id":"EUVD-2020-25940","description":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.","status":"published","published":"2020-09-02T18:25:25Z","modified":"2024-09-17T03:07:44Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C","level":"critical"}],"updated_at":"2026-11-03T00:28:34.673232Z"}],"ghsa":[{"id":"GHSA-8qjw-wjp9-mh9g","title":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may...","description":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.","status":"published","published":"2022-05-24T17:27:15Z","modified":"2023-01-29T05:04:21Z","updated_at":"2026-11-02T14:45:32.201087Z"}],"nvd":[{"id":"CVE-2020-4693","description":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.","status":"published","published":"2020-09-02T19:15:18.487Z","modified":"2026-06-17T03:20:22.03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:13.600965Z"}]}}