Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Cloud Application Performance Management
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-4131 1 Ibm 1 Cloud Application Performance Management 2022-01-01 5.0 MEDIUM 5.3 MEDIUM
IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270.
CVE-2020-4719 1 Ibm 1 Cloud Application Performance Management 2021-03-09 4.0 MEDIUM 4.9 MEDIUM
The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.