Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42956 State: PUBLISHED Published: 2024-03-28T15:39:18.246Z Last Updated: 2025-02-13T17:13:12.584Z Vendors: Apple Products: Safari, iOS and iPadOS, macOS Problem Types: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214039 - https://support.apple.com/en-us/HT214035 - https://support.apple.com/en-us/HT214036 - https://support.apple.com/kb/HT21403
tps://support.apple.com/en-us/HT214035 - https://support.apple.com/en-us/HT214036 - https://support.apple.com/kb/HT214039 - http://www.openwall.com/lists/oss-security/2024/03/26/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
CVE ID: CVE-2023-42957 State: PUBLISHED Published: 2024-07-29T20:21:36.819Z Last Updated: 2025-03-19T20:45:47.427Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to read sensitive location information Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us/HT213937
CVE ID: CVE-2023-42958 State: PUBLISHED Published: 2024-07-29T20:21:10.154Z Last Updated: 2025-03-13T19:20:21.002Z Vendors: Apple Products: macOS Problem Types: An app may be able to gain elevated privileges Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.4. An app may be able to gain elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213758
CVE ID: CVE-2023-42959 State: PUBLISHED Published: 2024-07-29T20:21:08.288Z Last Updated: 2024-08-02T19:37:23.084Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213940
CVE ID: CVE-2023-42961 State: PUBLISHED Published: 2025-04-11T14:53:59.841Z Last Updated: 2025-04-14T18:24:51.242Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A path handling issue was addressed with improved validation. Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120329 - https://support.apple.com/en-us/120950 - h
s://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120329 - https://support.apple.com/en-us/120950 - https://support.apple.com/en-us/120337 - https://support.apple.com/en-us/120328
CVE ID: CVE-2023-42962 State: PUBLISHED Published: 2024-03-28T15:39:10.717Z Last Updated: 2025-11-04T19:25:05.087Z Vendors: Apple Products: iOS and iPadOS Problem Types: A remote attacker may be able to cause a denial-of-service Description: This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. A remote attacker may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214035 - https://support.apple.com/en-us/HT214034
CVE ID: CVE-2023-42969 State: PUBLISHED Published: 2025-04-11T14:53:57.651Z Last Updated: 2025-04-11T16:04:08.108Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: The issue was addressed with improved handling of caches. Description: An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120329 - https://support.apple.com/en-us/120950 - https://support.apple.com/en-
120949 - https://support.apple.com/en-us/120329 - https://support.apple.com/en-us/120950 - https://support.apple.com/en-us/120337 - https://support.apple.com/en-us/120328
CVE ID: CVE-2023-42970 State: PUBLISHED Published: 2025-04-11T14:53:59.262Z Last Updated: 2025-04-12T03:55:21.744Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS, Safari Problem Types: A use-after-free issue was addressed with improved memory management. Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120950 - https://support.apple.com/en-us/120948 - http
/support.apple.com/en-us/120949 - https://support.apple.com/en-us/120950 - https://support.apple.com/en-us/120948 - https://support.apple.com/en-us/120947 - https://support.apple.com/en-us/120330
CVE ID: CVE-2023-42973 State: PUBLISHED Published: 2025-04-11T14:53:56.839Z Last Updated: 2025-04-11T15:55:33.915Z Vendors: Apple Products: iOS and iPadOS Problem Types: The issue was addressed with improved UI. Description: Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949
CVE ID: CVE-2023-42974 State: PUBLISHED Published: 2024-03-28T15:39:11.395Z Last Updated: 2025-11-04T19:25:08.342Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214035 - https://support.apple.com/en-us/HT21
: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214035 - https://support.apple.com/en-us/HT214034 - https://support.apple.com/en-us/HT214038 - https://support.apple.com/en-us/HT214037 - https://support.apple.com/en-us/HT214036
CVE ID: CVE-2023-42977 State: PUBLISHED Published: 2025-04-11T14:54:00.468Z Last Updated: 2025-04-12T03:55:16.297Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A path handling issue was addressed with improved validation. Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120950
CVE ID: CVE-2023-42981 State: PUBLISHED Published: 2025-04-11T14:53:56.349Z Last Updated: 2025-04-11T15:53:17.568Z Vendors: Apple Products: macOS Problem Types: The issue was addressed with improved checks. Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120950
CVE ID: CVE-2023-42982 State: PUBLISHED Published: 2025-04-11T14:53:59.650Z Last Updated: 2025-04-14T18:26:33.111Z Vendors: Apple Products: macOS Problem Types: The issue was addressed with improved checks. Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120950
CVE ID: CVE-2023-42983 State: PUBLISHED Published: 2025-04-11T14:54:00.715Z Last Updated: 2025-04-14T18:23:46.581Z Vendors: Apple Products: macOS Problem Types: The issue was addressed with improved checks. Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120950
CVE ID: CVE-2023-43000 State: PUBLISHED Published: 2025-11-05T18:33:23.777Z Last Updated: 2025-11-12T00:20:51.403Z Vendors: Apple Products: macOS, iOS and iPadOS, Safari Problem Types: Processing maliciously crafted web content may lead to memory corruption Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120331 - https://support.apple.com/en-us/120338 - https://support.apple.com/en-us/120324
CVE ID: CVE-2023-43013 State: PUBLISHED Published: 2023-09-28T21:00:07.125Z Last Updated: 2024-09-23T18:49:40.194Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Asset Management System Products: Asset Management System Problem Types: CWE-89 Description: Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/nergal - https://projectworlds.in/
CVE ID: CVE-2023-43014 State: PUBLISHED Published: 2023-09-28T21:04:11.974Z Last Updated: 2024-09-23T18:48:41.280Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Asset Management System Products: Asset Management System Problem Types: CWE-89 Description: Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/gaahl - https://projectworlds.in/
CVE ID: CVE-2023-43015 State: PUBLISHED Published: 2023-12-01T19:39:23.542Z Last Updated: 2024-11-21T18:59:42.094Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7067704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266064
CVE ID: CVE-2023-43016 State: PUBLISHED Published: 2024-02-03T00:55:55.841Z Last Updated: 2025-11-03T21:49:38.267Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-258 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm
ce ID: 266154. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266154
CVE ID: CVE-2023-43017 State: PUBLISHED Published: 2024-02-07T16:10:54.183Z Last Updated: 2025-11-03T21:49:39.723Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-295 Description: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force ID: 266155. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266155
CVE ID: CVE-2023-43018 State: PUBLISHED Published: 2023-11-02T23:48:46.991Z Last Updated: 2024-09-05T14:33:34.695Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: CICS TX Standard, CICS TX Advanced Problem Types: CWE-250 Description: IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 266163. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/266163 - https://www.ibm.com/s
CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/266163 - https://www.ibm.com/support/pages/node/7063668
CVE ID: CVE-2023-43021 State: PUBLISHED Published: 2023-12-01T20:55:06.148Z Last Updated: 2024-11-21T19:00:32.701Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-209 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7074317 - https://exchange.xfor
Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7074317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266167
CVE ID: CVE-2023-43029 State: PUBLISHED Published: 2025-03-21T15:33:51.807Z Last Updated: 2025-08-17T00:03:33.951Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Storage Virtualize vSphere Remote Plug-in Problem Types: CWE-526 Description: IBM Storage Virtualize vSphere Remote Plug-in 1.0 and 1.1 could allow a remote user to obtain sensitive credential information after deployment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7228722
CVE ID: CVE-2023-43035 State: PUBLISHED Published: 2025-04-10T13:26:44.672Z Last Updated: 2025-08-17T00:05:25.920Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling Control Center Problem Types: CWE-525 Description: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7230561
CVE ID: CVE-2023-43037 State: PUBLISHED Published: 2025-04-10T13:19:47.338Z Last Updated: 2025-08-16T23:43:52.116Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-20 Description: IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7230567
CVE ID: CVE-2023-43039 State: PUBLISHED Published: 2025-07-08T18:25:54.730Z Last Updated: 2025-08-17T00:04:37.335Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-79 Description: IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7238923
CVE ID: CVE-2023-43040 State: PUBLISHED Published: 2024-05-13T02:18:30.967Z Last Updated: 2025-11-04T19:25:09.433Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: IBM Products: Spectrum Fusion HCI Problem Types: CWE-1220 Description: IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7151040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
CVE ID: CVE-2023-43041 State: PUBLISHED Published: 2023-10-29T00:49:57.658Z Last Updated: 2024-09-06T19:34:56.965Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-200 Description: IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7060803 - https://exchange.xforce.ibmcloud.
CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7060803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266808
CVE ID: CVE-2023-43042 State: PUBLISHED Published: 2023-12-14T00:46:31.831Z Last Updated: 2025-05-22T17:54:36.010Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Virtualize Problem Types: CWE-1393 Description: IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7064976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266874
CVE ID: CVE-2023-43043 State: PUBLISHED Published: 2024-03-13T09:19:36.434Z Last Updated: 2024-08-05T14:43:10.897Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Maximo Application Suite - Maximo Mobile for EAM Problem Types: CWE-532 Description: IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user. IBM X-Force ID: 266875. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7138286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266875
CVE ID: CVE-2023-43044 State: PUBLISHED Published: 2023-09-28T17:23:59.611Z Last Updated: 2024-09-23T18:51:24.140Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: License Metric Tool Problem Types: CWE-22 Description: IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 266893. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7040605 - https://exchange.xforce.ibmcloud.c
Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7040605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266893
CVE ID: CVE-2023-43045 State: PUBLISHED Published: 2023-10-23T17:37:04.158Z Last Updated: 2024-09-11T14:15:35.899Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-288 Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266896
CVE ID: CVE-2023-43051 State: PUBLISHED Published: 2024-02-24T15:40:44.399Z Last Updated: 2025-02-13T17:13:13.695Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/712
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267451 - https://security.netapp.com/advisory/ntap-20240322-0008/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2023-43052 State: PUBLISHED Published: 2025-03-07T16:55:51.661Z Last Updated: 2025-08-16T23:43:09.959Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Control Center Problem Types: CWE-435 Description: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. Add
g suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7185102