Vulnerabilities > IBM > Cloud Application Performance Management > 8.1.4

DATE CVE VULNERABILITY TITLE RISK
2021-03-02 CVE-2020-4726 Insecure Storage of Sensitive Information vulnerability in IBM Cloud Application Performance Management 8.1.4
The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
ibm CWE-922
2.1
2021-03-02 CVE-2020-4725 Unspecified vulnerability in IBM Cloud Application Performance Management 8.1.4
IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user.
network
ibm
3.5
2021-03-02 CVE-2020-4719 Use of Incorrectly-Resolved Name or Reference vulnerability in IBM Cloud Application Performance Management 8.1.4
The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition.
network
low complexity
ibm CWE-706
4.0
2019-07-11 CVE-2019-4131 Unspecified vulnerability in IBM Cloud Application Performance Management 8.1.4
IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names.
network
low complexity
ibm
5.0