References https://www.ibm.com/support/pages/security-bulletin-ibm-data-risk-manager-affected-multiple-vulnerabilities-including-remote-code-execution-apache-commons-text-19 https://www.ibm.com/support/pages/security-bulletin-vulnerabilities-exist-ibm-data-risk-manager-cve-2020-4427-cve-2020-4428-cve-2020-4429-and-cve-2020-4430 https://github.com/pedrib/PoC/blob/master/advisories/IBM/ibm_drm/ibm_drm_rce.md https://thehackernews.com/2020/04/ibm-data-risk-manager-vulnerabilities.html https://www.cvedetails.com/cve/CVE-2020-4428/ https://nvd.nist.gov/vuln/detail/CVE-2020-4428 https://www.rapid7.com/db/modules/exploit/linux/http/ibm_drm_rce/ https://www.secpod.com/blog/unpatched-zero-day-vulnerabilities-put-ibm-data-risk-manager-at-risk/ https://securityaffairs.com/101982/hacking/ibm-data-risk-manager-zero-day.html https://www.tenable.com/plugins/nessus/181416 https://exchange.xforce.ibmcloud.com/vulnerabilities/184979 https://seclists.org/fulldisclosure/2020/Apr/33 https://cve.imfht.com/product/Data%20Risk%20Manager
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect智慧物联网综合服务平台ListFileManager存在目录枚举漏洞WP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)SteVe /steve/manager/signin 默认口令漏洞PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionWP User Manager /profile/admin/about 本地文件包含漏洞月子会所ERP管理云平台WarningManager sidx参数存在SQL注入漏洞Apache Pulsar /pulsar-manager/login 默认口令漏洞