Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20341 State: PUBLISHED Published: 2021-03-09T14:55:13.340111Z Last Updated: 2024-09-16T23:31:58.352Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/PR:N/I:N/UI:N/AV:N/AC:L/A:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Pak for Multicloud Management Monitoring Problem Types: Obtain Information Description: IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6426997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194513
CVE ID: CVE-2021-20343 State: PUBLISHED Published: 2021-06-02T20:40:40.575380Z Last Updated: 2024-09-16T20:03:07.384Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:U/C:L/PR:L/AV:N/I:L/A:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Test Management, Rational Quality Manager, Rational Rhapsody Model Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager Problem Types: Gain Access Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p
r-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194593
CVE ID: CVE-2021-20345 State: PUBLISHED Published: 2021-06-02T20:40:41.294392Z Last Updated: 2024-09-16T22:51:25.085Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AV:N/I:L/UI:N/A:N/AC:L/S:U/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Rational Rhapsody Model Manager, Rational Quality Manager, Engineering Test Management, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization Problem Types: Gain Access Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p
r-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194594
CVE ID: CVE-2021-20346 State: PUBLISHED Published: 2021-06-02T20:40:41.976873Z Last Updated: 2024-09-16T16:12:46.143Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:U/UI:N/A:N/AC:L/I:L/AV:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Test Management Problem Types: Gain Access Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p
r-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194595
CVE ID: CVE-2021-20347 State: PUBLISHED Published: 2021-06-02T20:40:42.715216Z Last Updated: 2024-09-16T22:36:24.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:U/AC:L/A:N/UI:N/I:L/AV:N/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization, Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Test Management Problem Types: Gain Access Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p
r-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194596
CVE ID: CVE-2021-20348 State: PUBLISHED Published: 2021-06-02T20:40:43.390611Z Last Updated: 2024-09-16T20:43:23.221Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/UI:N/I:L/PR:L/AV:N/C:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Rhapsody Model Manager, Rational Quality Manager, Engineering Test Management, Rational DOORS Next Generation, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Engineering Lifecycle Optimization Problem Types: Gain Access Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p
r-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194597
CVE ID: CVE-2021-20349 State: PUBLISHED Published: 2021-08-09T16:05:12.746702Z Last Updated: 2024-09-16T20:58:28.442Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:L/AV:L/S:U/UI:N/A:L/I:L/C:L/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Workload Scheduler Problem Types: Gain Privileges Description: IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194599
CVE ID: CVE-2021-20350 State: PUBLISHED Published: 2021-03-04T19:05:43.976267Z Last Updated: 2024-09-16T17:28:43.690Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/C:L/I:L/UI:R/A:N/S:C/PR:L/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Team Concert, Engineering Workflow Management, Engineering Test Management, Rational DOORS Next Generation, Engineering Lifecycle Optimization Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru
t code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194707
CVE ID: CVE-2021-20351 State: PUBLISHED Published: 2021-03-04T19:05:44.675900Z Last Updated: 2024-09-17T00:10:34.504Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/C:L/I:L/AV:N/AC:L/PR:L/A:N/S:C/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert, Engineering Workflow Management, Rational Quality Manager, Engineering Test Management, Engineering Lifecycle Optimization, Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru
t code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194708
CVE ID: CVE-2021-20352 State: PUBLISHED Published: 2021-03-30T16:45:29.336671Z Last Updated: 2024-09-16T22:24:39.538Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/PR:L/S:C/I:L/AV:N/C:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Workflow Management, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager, Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194710
CVE ID: CVE-2021-20353 State: PUBLISHED Published: 2021-02-10T17:00:19.962088Z Last Updated: 2024-09-16T16:13:58.804Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/S:U/UI:N/AC:L/C:H/A:L/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413709 - htt
2. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194882 - https://www.zerodayinitiative.com/advisories/ZDI-21-174/
CVE ID: CVE-2021-20354 State: PUBLISHED Published: 2021-02-18T15:10:45.009397Z Last Updated: 2024-09-16T20:57:59.187Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/A:N/AV:N/PR:N/AC:H/S:U/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 194883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415959 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194883
CVE ID: CVE-2021-20355 State: PUBLISHED Published: 2022-06-24T16:15:31.741198Z Last Updated: 2024-09-17T02:52:23.838Z Severity: LOW (CVSS 3.7 CVSS:3.0/I:N/C:L/AV:N/UI:N/S:U/AC:H/A:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Jazz Team Server Problem Types: Obtain Information Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 194891. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597583 - htt
1. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194891
CVE ID: CVE-2021-20357 State: PUBLISHED Published: 2021-01-27T16:15:28.467865Z Last Updated: 2024-09-16T22:41:31.988Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/C:L/AV:N/AC:L/S:C/A:N/UI:R/I:L/RL:O/RC:C/E:H) Vendors: IBM Products: Rational DOORS Next Generation, Rational Quality Manager, Rational Collaborative Lifecycle Management, Rational Team Concert, Engineering Test Management, Rational Rhapsody Design Manager, Engineering Lifecycle Optimization, Rational Rhapsody Model Manager, Engineering Workflow Management, Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows
ite Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194963
CVE ID: CVE-2021-20358 State: PUBLISHED Published: 2021-02-08T14:40:18.442624Z Last Updated: 2024-09-16T22:08:54.722Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:L/I:N/AV:N/A:N/AC:L/UI:N/C:H/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Automation Problem Types: Obtain Information Description: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6412345 - https://exchange.xforce.ibmcloud.com/vulnerabil
ontainer: References: - https://www.ibm.com/support/pages/node/6412345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194965
CVE ID: CVE-2021-20359 State: PUBLISHED Published: 2021-02-08T14:40:19.138240Z Last Updated: 2024-09-17T01:26:20.855Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/AC:L/C:H/S:U/PR:L/I:N/A:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Automation Problem Types: Obtain Information Description: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6412345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1949
References: - https://www.ibm.com/support/pages/node/6412345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/194966
CVE ID: CVE-2021-20360 State: PUBLISHED Published: 2021-07-13T16:10:31.911085Z Last Updated: 2024-09-16T19:45:59.850Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/AV:N/C:H/UI:N/PR:N/A:N/AC:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Obtain Information Description: IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195031
CVE ID: CVE-2021-20361 State: PUBLISHED Published: 2021-07-13T16:10:33.537253Z Last Updated: 2024-09-16T19:52:20.649Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/C:L/S:C/AC:L/I:L/A:N/PR:L/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195032. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195032
CVE ID: CVE-2021-20362 State: PUBLISHED Published: 2021-07-13T16:10:35.110955Z Last Updated: 2024-09-16T23:56:10.243Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/I:L/A:N/PR:L/UI:R/AV:N/C:L/S:C/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195033. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195033
CVE ID: CVE-2021-20363 State: PUBLISHED Published: 2021-07-13T16:10:36.693164Z Last Updated: 2024-09-16T17:08:01.623Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AV:N/C:L/PR:L/UI:R/A:N/I:L/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195034. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195034
CVE ID: CVE-2021-20364 State: PUBLISHED Published: 2021-07-13T16:10:38.250692Z Last Updated: 2024-09-16T22:57:00.231Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/A:N/AC:L/I:L/S:C/C:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195035. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195035. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195035
CVE ID: CVE-2021-20365 State: PUBLISHED Published: 2021-07-13T16:10:40.101941Z Last Updated: 2024-09-16T18:59:29.313Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/I:L/AC:L/A:N/S:C/C:L/AV:N/RL:O/RC:C/E:H) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195036. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195036
CVE ID: CVE-2021-20366 State: PUBLISHED Published: 2021-07-13T16:10:41.678085Z Last Updated: 2024-09-16T16:28:29.564Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/UI:R/I:L/AC:L/A:N/S:C/AV:N/C:L/E:H/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195037
CVE ID: CVE-2021-20368 State: PUBLISHED Published: 2021-07-13T16:10:43.257785Z Last Updated: 2024-09-16T23:36:55.954Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/I:L/AC:L/A:N/S:C/AV:N/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195357. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 195357. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195357
CVE ID: CVE-2021-20369 State: PUBLISHED Published: 2021-07-13T16:10:44.879834Z Last Updated: 2024-09-16T21:07:16.473Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/C:H/AV:N/UI:N/PR:N/A:N/AC:H/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Obtain Information Description: IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195361
CVE ID: CVE-2021-20371 State: PUBLISHED Published: 2021-06-02T20:40:44.116913Z Last Updated: 2024-09-16T23:06:28.698Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/AV:N/I:N/UI:N/A:N/AC:L/S:U/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Test Management Problem Types: Obtain Information Description: IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could b
mote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195516