[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f24cZru01wZmIV3jDNHCnPEcUAj1igszL_M90yXnfORI":3,"g5a-family:ibm\u002Fdata_risk_manager":203,"g5a-ex:ibm\u002Fdata_risk_manager@*":204},{"success":4,"data":5},true,{"product":6,"versions":82,"topVulnerabilitiesByEpss":115,"kevVulnerabilities":169,"seoMetadata":181,"meta":200},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":81},"ibm","data_risk_manager",32,18,3,"2021-10-12",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.1",1,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.1.1",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.1.2",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.2",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.3",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.3.1",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.3.2",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.4",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.4.1",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.5",{"version":38,"cve_count":11,"kev_count":17,"has_kev":18},"2.0.6",{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.1",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.10",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.11",{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.12",{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.13",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.14",{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.15",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.16",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.17",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.18",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.19",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.2",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.20",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.3",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.4",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.5",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.6",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.7",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.8",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.6.9",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"3.0.0","Data Risk Manager by Ibm is a technology product with 32 tracked versions and 18 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":11,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},[116,124,128,134,139,146,151,155,159,164],{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":121,"severity":122,"isKev":18,"epssScore":123},"CVE-2020-4429","IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.","2020-05-07",9.8,"v3.1","Critical",0.71363,{"cveId":125,"description":126,"publishedDate":119,"cvssScore":120,"cvssVersion":121,"severity":122,"isKev":4,"epssScore":127},"CVE-2020-4427","IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.",0.70031,{"cveId":129,"description":130,"publishedDate":119,"cvssScore":131,"cvssVersion":121,"severity":132,"isKev":4,"epssScore":133},"CVE-2020-4430","IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.",4.3,"Medium",0.68544,{"cveId":135,"description":136,"publishedDate":119,"cvssScore":137,"cvssVersion":121,"severity":122,"isKev":4,"epssScore":138},"CVE-2020-4428","IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.",9.1,0.61692,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":121,"severity":144,"isKev":18,"epssScore":145},"CVE-2020-4620","IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 184979.","2020-09-22",8.8,"High",0.05187,{"cveId":147,"description":148,"publishedDate":142,"cvssScore":149,"cvssVersion":121,"severity":132,"isKev":18,"epssScore":150},"CVE-2020-4616","IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.",5.3,0.01704,{"cveId":152,"description":153,"publishedDate":142,"cvssScore":143,"cvssVersion":121,"severity":144,"isKev":18,"epssScore":154},"CVE-2020-4611","IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922.",0.01631,{"cveId":156,"description":157,"publishedDate":142,"cvssScore":143,"cvssVersion":121,"severity":144,"isKev":18,"epssScore":158},"CVE-2020-4621","IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.",0.01346,{"cveId":160,"description":161,"publishedDate":142,"cvssScore":162,"cvssVersion":121,"severity":132,"isKev":18,"epssScore":163},"CVE-2020-4612","IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.",6.5,0.01332,{"cveId":165,"description":166,"publishedDate":142,"cvssScore":167,"cvssVersion":121,"severity":144,"isKev":18,"epssScore":168},"CVE-2020-4622","IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983.",7.5,0.01179,[170,175,178],{"cveId":125,"description":126,"publishedDate":119,"cvssScore":120,"severity":122,"isKev":4,"epssScore":127,"cisaVulnName":171,"cisaDateAdded":172,"cisaShortDescription":173,"cisaRequiredAction":174},"IBM Data Risk Manager Security Bypass Vulnerability","2021-11-03","IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.","Apply updates per vendor instructions.",{"cveId":135,"description":136,"publishedDate":119,"cvssScore":137,"severity":122,"isKev":4,"epssScore":138,"cisaVulnName":176,"cisaDateAdded":172,"cisaShortDescription":177,"cisaRequiredAction":174},"IBM Data Risk Manager Remote Code Execution Vulnerability","IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�",{"cveId":129,"description":130,"publishedDate":119,"cvssScore":131,"severity":132,"isKev":4,"epssScore":133,"cisaVulnName":179,"cisaDateAdded":172,"cisaShortDescription":180,"cisaRequiredAction":174},"IBM Data Risk Manager Directory Traversal Vulnerability","IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.",{"title":182,"metaDescription":183,"keywords":184,"structuredData":185},"Data Risk Manager by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Data Risk Manager by Ibm covering 32 versions with 18 tracked vulnerabilities including 2 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Data Risk Manager vulnerabilities, Data Risk Manager security, Data Risk Manager CVE, Ibm Data Risk Manager, Data Risk Manager threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Data Risk Manager KEV, Data Risk Manager exploited vulnerabilities",{"@context":186,"@type":187,"name":188,"description":183,"url":189,"manufacturer":190,"applicationCategory":194,"softwareVersion":195,"mainEntity":196},"https:\u002F\u002Fschema.org","SoftwareApplication","Data Risk Manager","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fdata_risk_manager",{"@type":191,"name":192,"url":193},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","32 versions tracked",{"@type":197,"name":198,"description":199,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Data Risk Manager Security Vulnerabilities","Security vulnerabilities affecting Data Risk Manager by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":201,"apiVersion":202},"2026-10-28T14:44:31.264Z","3.0",[],{"rows":205,"total":11,"capped":18,"failed":17},[206,211,216],{"cveId":125,"name":171,"severity":122,"cvss":120,"added":172,"epss":127,"published":207,"ranges":208,"checked":4,"hits":210,"covers":18},"2020-05-07T20:15:12.627",[209],"2.0.1 to 2.0.6.1",[],{"cveId":135,"name":176,"severity":122,"cvss":137,"added":172,"epss":138,"published":212,"ranges":213,"checked":4,"hits":215,"covers":18},"2020-05-07T20:15:12.673",[214],"2.0.1 to 2.0.4",[],{"cveId":129,"name":179,"severity":132,"cvss":131,"added":172,"epss":133,"published":217,"ranges":218,"checked":4,"hits":219,"covers":18},"2020-05-07T20:15:12.783",[214],[]]