Medium · 4.3 CVE-2020-4725 EUVD-2020-25972GHSA-j4c8-2w3r-v274

IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request …

Published Mar 2, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force ID: 187974.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cloud APM	8.1.4	—

References

https://www.ibm.com/support/pages/node/6417137
ibm-monitoring-cve20204725-content-spoofing (187974) vdb-entry