Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_application_performance_management:8.1.4:*:*:*:*:base_private:*:*

part: a version: 8.1.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Application Performance Management (534c83c5-b8a0-5696-8710-3bff4ba51eb1)
Edition*
Language*
Software edition*
Target softwarebase_private
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4726 vulnerable 2026-06-08 05:26:40.827321 Details available
MEDIUM (4)
The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975.
Published: 2021-03-02T16:55:19.741Z
Updated: 2024-09-16T23:25:39.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4725 vulnerable 2026-06-08 05:26:40.826777 Details available
MEDIUM (4.3)
IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force ID: 187974.
Published: 2021-03-02T16:55:19.095Z
Updated: 2024-09-17T00:55:46.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4719 vulnerable 2026-06-08 05:26:40.821466 Details available
MEDIUM (4.9)
The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.
Published: 2021-03-02T16:55:18.430Z
Updated: 2024-09-16T21:04:24.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4131 vulnerable 2026-06-08 05:13:56.861241 Details available
MEDIUM (5.3)
IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270.
Published: 2019-07-11T19:55:18.677Z
Updated: 2024-09-17T02:53:12.357Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.