[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAIslMJJdkPnOaudjI1zZWYDV0Y63yEj5HKmO85gviQg":3,"g5a-risk:CVE-2020-4325":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":60,"references":61,"referencesCount":60,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":121,"notableEvents":122},"CVE-2020-4325","What is CVE-2020-4325?","The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the memory used by those thread pools, which leads to an OutOfMemory exception when the Process Federation Server Global Teams REST API is used extensively. IBM X-Force ID: 177596.","The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that...","2020-04-02T15:15:17.843","2021-07-21T11:39:23.747",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"psirt@us.ibm.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:N\u002FA:P","SINGLE","PARTIAL",4,8,2.9,0.01456,[47,47,47,47,47,47,47],"Medium",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"ibm","cloud_pak_for_automation","19.0.3","cpe:2.3:a:ibm:cloud_pak_for_automation:19.0.3:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"process_federation_server","*","cpe:2.3:a:ibm:process_federation_server:*:*:*:*:*:*:*:*",2,[62,68],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F177596","Ibmcloud",[66,67],"VDB Entry","Vendor Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6125403","Ibm",[67],[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-404","Improper Resource Shutdown or Release","The product does not release or incorrectly releases a resource before it is made available for re-use.","When a resource is created or allocated, the developer is responsible for properly releasing the resource as well as accounting for all potential paths of expiration or invalidation, such as a set period of time or revocation.","Draft","Class","Simple",1,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2020-4325? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-4325, a medium severity cyber security vulnerability from 2020. The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0...","CVE-2020-4325, CVE-2020-4325 vulnerability, CVE-2020-4325 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, ibm security, cloud_pak_for_automation vulnerability, process_federation_server vulnerability","\u002Fwhat-is\u002Fcve-2020-4325",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-4325","Cybersecurity","CVE-2020-4325, CVE-2020-4325 vulnerability, CVE-2020-4325 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":27,"CPEMatch":114},"OR",[115,117],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7CBF76EB-4CFF-4652-81D5-8DDE886993F9",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":119,"VersionEndExcluding":27,"VersionEndIncluding":120},"D34E3007-92F3-4AB4-9B6A-6D70F142434F","18.0.0.1","19.0.0.3",[],[],{"lastModified":11,"cacheTime":124,"version":40},1793219656121,{"score":126,"band":127,"action":128,"scoredAt":129},23,"Low","Monitor","2026-07-01T10:24:48.630631+00:00"]