CVE-2020-4428

CWE-78

Critical

99.2

RPS

Description

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.

Source: NVD

CVSS: 9.1; Critical · v3.1
EPSS: 61.69%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Nov 2021
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-78
Published: 7 May 2020; Last modified 4 Nov 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2020-4428

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2020-4428

Description

Signals

Get this score from the API