[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu21KCyRj481aZC_2ygEhRO0bTyaAxuK1s12-OHPVNEM":3,"g5a-risk:CVE-2020-4499":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":60,"references":61,"referencesCount":60,"weaknesses":73,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":119,"notableEvents":120},"CVE-2020-4499","What is CVE-2020-4499?","IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.","IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authenti...","2020-10-15T13:15:12.913","2021-07-21T11:39:23.747",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":38},"psirt@us.ibm.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":37,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",7.3,3.4,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":25,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01248,[48,48,48,48,48,48,48],"Critical",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"ibm","security_access_manager","*","cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":55,"criteria":59,"vulnerable":4},"security_verify_access","cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*",2,[62,68],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F182216","Ibmcloud",[66,67],"VDB Entry","Vendor Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6348046","Ibm",[72,67],"Patch",[74],{"id":75,"name":75,"description":76},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2020-4499? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-4499, a critical severity cyber security vulnerability from 2020. IBM Security Access Manager 9.0.7 and IBM Security Verif...","CVE-2020-4499, CVE-2020-4499 vulnerability, CVE-2020-4499 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, ibm security, security_access_manager vulnerability, security_verify_access vulnerability","\u002Fwhat-is\u002Fcve-2020-4499",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-4499","Cybersecurity","CVE-2020-4499, CVE-2020-4499 vulnerability, CVE-2020-4499 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":27,"CPEMatch":110},"OR",[111,115],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":113,"VersionEndExcluding":114,"VersionEndIncluding":27},"58BFDCF5-D32F-4C5D-8F1C-75932843157F","9.0.7.0","9.0.7.2",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":27},"4A6EA022-9E98-4AEB-9B98-8BC6061141EE","10.0.0","10.0.0.1",[],[],{"lastModified":11,"cacheTime":122,"version":42},1793230299252,{"score":124,"band":125,"action":126,"scoredAt":127},55,"Medium","Plan remediation","2026-10-28T06:49:30.816487+00:00"]