Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.6:*:*:*:*:*:*:*

part: a version: 5.2.6 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Identity Governance And Intelligence (2eb65646-ead4-5851-ab1d-f30024617a46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4996 vulnerable 2026-06-08 05:26:41.346012 Details available
MEDIUM (6.5)
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913.
Published: 2021-02-09T14:50:24.289Z
Updated: 2024-09-16T23:36:19.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4995 vulnerable 2026-06-08 05:26:41.345371 Details available
MEDIUM (4)
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a user to obtain sensitive information from another users' session. IBM X-Force ID: 192912.
Published: 2021-02-09T14:50:23.629Z
Updated: 2024-09-17T03:34:09.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4969 vulnerable 2026-06-08 05:26:41.242478 Details available
LOW (2.6)
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2021-01-21T14:00:28.000Z
Updated: 2024-09-16T23:36:02.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4968 vulnerable 2026-06-08 05:26:41.242051 Details available
MEDIUM (5.3)
IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192427.
Published: 2021-01-21T14:00:27.357Z
Updated: 2024-09-16T19:31:24.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4966 vulnerable 2026-06-08 05:26:41.241259 Details available
MEDIUM (4.3)
IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 192423.
Published: 2021-01-21T14:00:26.720Z
Updated: 2024-09-17T01:12:14.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4958 vulnerable 2026-06-08 05:26:41.234139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4957 vulnerable 2026-06-08 05:26:41.233648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4795 vulnerable 2026-06-08 05:26:40.999563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4791 vulnerable 2026-06-08 05:26:40.968809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4790 vulnerable 2026-06-08 05:26:40.968232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4249 vulnerable 2026-06-08 05:25:59.039803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4248 vulnerable 2026-06-08 05:25:59.039461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4246 vulnerable 2026-06-08 05:25:59.039116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4245 vulnerable 2026-06-08 05:25:59.038752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4244 vulnerable 2026-06-08 05:25:59.038181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4243 vulnerable 2026-06-08 05:25:59.037851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4233 vulnerable 2026-06-08 05:25:59.032321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4232 vulnerable 2026-06-08 05:25:59.031955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4231 vulnerable 2026-06-08 05:25:59.031501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.