ibm data risk manager

Name: ibm data risk manager
Brand: ibm

productUS

cpe:2.3:a:ibm:data_risk_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical8high7medium0low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-4427US	critical9.8OT critical	70.0% (99th)	KEV	no fix	2020-05-07	2.0.1 → 2.0.6.1
CVE-2020-4428US	critical9.1OT critical	61.7% (99th)	KEV	no fix	2020-05-07	2.0.1 → 2.0.4
CVE-2020-4430US	medium4.3OT critical	68.5% (99th)	KEV	no fix	2020-05-07	2.0.1 → 2.0.4
CVE-2020-4429US	critical9.8OT high	72.0% (99th)	Exploit	no fix	2020-05-07	6 versions
CVE-2020-4620US	high8.8	5.19% (92nd)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4616US	medium5.3	1.70% (77th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4611US	high8.8	1.63% (76th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4621US	high8.8OT elevated	1.35% (71st)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4612US	medium6.5	1.33% (71st)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4622US	high7.5OT elevated	1.18% (68th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4618US	medium4.9	1.10% (66th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4613US	high7.5OT elevated	0.94% (61st)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4614US	high7.5OT elevated	0.81% (57th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4619US	medium6.5OT elevated	0.71% (53rd)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2021-38862US	high7.5	0.69% (53rd)	—	no fix	2021-10-12	= 2.0.6
CVE-2020-4615US	medium5.4	0.67% (52nd)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2020-4617US	high8.1	0.55% (46th)	—	2.0.6.4	2020-09-22	< 2.0.6.4
CVE-2021-38915US	medium6.5OT elevated	0.51% (43rd)	—	no fix	2021-10-12	= 2.0.6

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.