{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2020-4463/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2020-4463/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2020-4463/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2020-4463/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2020-4463/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2020-4463"},"sightings":{"href":"/api/v1/sightings/cve-2020-4463"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2020/CVE-2020-4463.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2020-4463\n\ninfo:\n  name: IBM Maximo Asset Management Information Disclosure - XML External Entity Injection\n  author: dwisiswant0\n  severity: high\n  description: |\n    IBM Maximo Asset Management is vulnerable to an\n    XML external entity injection (XXE) attack when processing XML data.\n    A remote attacker could exploit this vulnerability to expose\n    sensitive information or consume memory resources.\n  impact: |\n    The vulnerability can lead to unauthorized access to sensitive information or a denial of service.\n  remediation: |\n    Apply the latest security patches or updates provided by IBM to mitigate the vulnerability.\n  reference:\n    - https://www.ibm.com/support/pages/security-bulletin-ibm-maximo-asset-management-vulnerable-information-disclosure-cve-2020-4463\n    - https://github.com/Ibonok/CVE-2020-4463\n    - https://exchange.xforce.ibmcloud.com/vulnerabilities/181484\n    - https://www.ibm.com/support/pages/node/6253953\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-4463\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L\n    cvss-score: 8.2\n    cve-id: CVE-2020-4463\n    cwe-id: CWE-611\n    epss-score: 0.3159\n    epss-percentile: 0.98212\n    cpe: cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: ibm\n    product: maximo_asset_management\n    shodan-query: http.favicon.hash:-399298961\n    fofa-query: icon_hash=-399298961\n  tags: cve,cve2020,ibm,xxe,disclosure,vkev,vuln\n\nhttp:\n  - method: POST\n    path:\n      - \"{{BaseURL}}/os/mxperson\"\n      - \"{{BaseURL}}/meaweb/os/mxperson\"\n\n    body: |\n      <?xml version='1.0' encoding='UTF-8'?>\n      <max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>\n        <max:MXPERSONQuery></max:MXPERSONQuery>\n      </max:QueryMXPERSON>\n\n    headers:\n      Content-Type: \"application/xml\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"QueryMXPERSONResponse\"\n          - \"MXPERSONSet\"\n\n      - type: word\n        part: header\n        words:\n          - \"application/xml\"\n# digest: 4b0a00483046022100b5e6e0667c076cfaf641af4158a8278c01feb39aa80badf2eaa17466b38dcf5702210086fe68e971d457bb40c582b18526d1b74b8dbcbe29f550e42a8c062c1f09f821:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2020-4463"}