← Vulnerability feed

Vulnerability record · CVE-2020-4902 · published 1 July 2021

CVE-2020-4902: Ibm datacap navigator sql injection vulnerability

Ibm · Datacap Navigator

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045.

8.8 CVSS 3.1 High EPSS 0.97% · top 39.7% CWE-89 · SQL injection
8.8CVSS 3.1 base score, v2 6.5
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/191045 VDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6468405 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/191045 VDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6468405 PatchVendor Advisory

Track CVE-2020-4902 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-39736Ibm datacap vulnerabilityIBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOS…EPSS 0.37%7.5CVE-2026-8636Ibm datacap vulnerabilityIBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic…EPSS 0.20%6.1CVE-2026-8059Ibm datacap cross-site scripting vulnerabilityIBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allow…EPSS 0.24%5.4CVE-2025-36027Ibm datacap clickjacking vulnerabilityIBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a mali…EPSS 0.22%5.4CVE-2024-39730Ibm datacap vulnerabilityIBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to vi…EPSS 0.22%5.4CVE-2024-39735Ibm datacap cross-site scripting vulnerabilityIBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to…EPSS 0.30%5.4CVE-2024-39728Ibm datacap cross-site scripting vulnerabilityIBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed ar…EPSS 0.34%5.4CVE-2020-4935Ibm datacap navigator cross-site scripting vulnerabilityIBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …EPSS 0.50%

Source: NIST National Vulnerability Database (record CVE-2020-4902), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.