[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-4977":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":55,"references":65,"score":68,"epss_score":69,"epss_percentile":70,"is_kev":71,"cisa_kev_date_added":72,"cisa_kev_due_date":72,"cisa_ssvc":73,"attack_mappings":79,"exploits":86},253280,"CVE-2020-4977","EUVD-2020-26224","IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192470.","2021-06-02T21:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","MEDIUM","NONE",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":17,"vectorString":23,"integrityImpact":24,"userInteraction":25,"attackComplexity":24,"availabilityImpact":18,"privilegesRequired":24,"confidentialityImpact":24},"CHANGED","3.1",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED",true,[28],"CWE-79",[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"cpe:2.3:a:ibm:rational_doors_next_generation:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_doors_next_generation:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:removable_media_manager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:removable_media_manager:6.0.6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:removable_media_manager:7.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_doors_next_generation:7.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",[56,57,58,59,60,61,62,63,64],"Ibm Engineering Lifecycle Optimization - Engineering Insights","Ibm Engineering Lifecycle Management","Ibm Rational Engineering Lifecycle Manager","Ibm Engineering Test Management","Ibm Collaborative Lifecycle Management","Ibm Rational Quality Manager","Ibm Rational Doors Next Generation","Ibm Removable Media Manager","Ibm Engineering Lifecycle Optimization - Publishing",[66,67],"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F192470","https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6457739",0.47,0.00495,0.41671,false,null,{"timestamp":72,"automatable":74,"tech_impact":75,"exploitation":76,"cisa_decision":77,"cisa_remediation_timeline":78},"no","partial","none",{},"FSU",[80],{"name":81,"source":82,"tactics":83,"technique_id":85},"Exploit Public-Facing Application","attack_vector",[84],"initial-access","T1190",[]]