Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
in a trusted session. IBM X-Force ID: 186094. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6382414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186094
CVE ID: CVE-2020-4658 State: PUBLISHED Published: 2020-12-16T20:35:26.712718Z Last Updated: 2024-09-16T19:24:09.366Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/C:L/A:N/I:L/UI:R/AC:L/AV:N/S:C/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186095. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 186095. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6382416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186095
CVE ID: CVE-2020-4660 State: PUBLISHED Published: 2020-10-12T13:05:34.819706Z Last Updated: 2024-09-16T22:08:58.203Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:A/A:N/PR:N/UI:N/S:U/C:H/I:N/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Access Manager, Security Verify Access Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186140
CVE ID: CVE-2020-4661 State: PUBLISHED Published: 2020-10-12T13:05:35.256777Z Last Updated: 2024-09-16T17:38:55.445Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/I:N/C:H/UI:N/S:U/PR:N/A:N/AV:A/RL:O/RC:C/E:U) Vendors: IBM Products: Security Access Manager, Security Verify Access Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186142
CVE ID: CVE-2020-4662 State: PUBLISHED Published: 2020-08-14T12:40:12.652237Z Last Updated: 2024-09-16T20:12:24.930Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/A:N/C:N/UI:N/I:H/PR:L/AC:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Event Streams Problem Types: Gain Privileges Description: IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6259393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186233
CVE ID: CVE-2020-4663 State: PUBLISHED Published: 2021-01-08T14:45:25.596888Z Last Updated: 2024-09-16T17:58:59.131Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/A:N/UI:R/I:L/S:C/PR:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Requirements Quality Assistant Problem Types: Cross-Site Scripting Description: IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186234. Additional Analyst Notes: - CVE Program Container: References: -
sure within a trusted session. IBM X-Force ID: 186234. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186234
CVE ID: CVE-2020-4664 State: PUBLISHED Published: 2021-01-08T14:45:26.229031Z Last Updated: 2024-09-16T17:58:14.121Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/A:N/UI:R/AV:N/AC:L/C:L/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Engineering Requirements Quality Assistant Problem Types: Cross-Site Scripting Description: IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186235. Additional Analyst Notes: - CVE Program Container: References: -
sure within a trusted session. IBM X-Force ID: 186235. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186235
CVE ID: CVE-2020-4665 State: PUBLISHED Published: 2020-11-16T16:40:35.424156Z Last Updated: 2024-09-16T17:38:21.113Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/UI:R/S:U/AV:N/C:L/I:N/A:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the t
oes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 186280. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186280
CVE ID: CVE-2020-4666 State: PUBLISHED Published: 2021-01-08T14:45:26.864379Z Last Updated: 2024-09-16T22:55:38.552Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/AV:N/S:C/I:L/AC:L/C:L/PR:L/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Requirements Quality Assistant Problem Types: Cross-Site Scripting Description: IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186281. Additional Analyst Notes: - CVE Program Container: References: -
sure within a trusted session. IBM X-Force ID: 186281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186281
CVE ID: CVE-2020-4667 State: PUBLISHED Published: 2021-01-08T14:45:27.503152Z Last Updated: 2024-09-17T00:45:28.226Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/A:N/UI:N/AV:N/S:U/I:N/PR:L/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Engineering Requirements Quality Assistant Problem Types: Obtain Information Description: IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186282
CVE ID: CVE-2020-4668 State: PUBLISHED Published: 2022-04-08T15:30:19.914886Z Last Updated: 2024-09-16T23:45:41.051Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/UI:R/C:N/AC:L/PR:N/I:L/AV:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/65704
D: 186283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186283
CVE ID: CVE-2020-4669 State: PUBLISHED Published: 2021-05-17T17:10:14.686494Z Last Updated: 2024-09-16T16:53:24.617Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/UI:N/S:U/AC:H/PR:N/I:H/C:H/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Planning Analytics Local Problem Types: Data Manipulation Description: IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 184600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 184600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6436821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186400
CVE ID: CVE-2020-4670 State: PUBLISHED Published: 2021-05-17T17:10:15.368274Z Last Updated: 2024-09-16T20:32:43.965Z Severity: HIGH (CVSS 7.4 CVSS:3.0/PR:N/AC:H/S:U/AV:N/UI:N/C:H/A:N/I:H/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Data Manipulation Description: IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6436821 - ht
01. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6436821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186401
CVE ID: CVE-2020-4671 State: PUBLISHED Published: 2020-11-16T16:40:35.851179Z Last Updated: 2024-09-16T22:56:11.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/S:U/UI:N/AC:L/A:N/PR:L/I:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6368001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186284
CVE ID: CVE-2020-4672 State: PUBLISHED Published: 2020-11-16T16:40:36.334214Z Last Updated: 2024-09-17T04:20:42.179Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/A:N/I:L/S:C/UI:R/AC:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186285. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pag
IBM X-Force ID: 186285. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186285
CVE ID: CVE-2020-4673 State: PUBLISHED Published: 2021-01-12T14:45:25.492153Z Last Updated: 2024-09-16T16:42:53.222Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AV:N/AC:L/UI:N/C:L/PR:L/S:U/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Workload Automation Problem Types: Obtain Information Description: IBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in further attacks against the system. IBM X-Force ID: 186286. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6402481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186286
CVE ID: CVE-2020-4674 State: PUBLISHED Published: 2021-01-12T14:45:26.162141Z Last Updated: 2024-09-17T00:41:25.609Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AV:N/AC:L/C:L/UI:N/PR:L/S:U/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Workload Automation Problem Types: Obtain Information Description: IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system. IBM X-Force ID: 186287. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6402483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186287
CVE ID: CVE-2020-4675 State: PUBLISHED Published: 2021-07-16T16:50:21.687037Z Last Updated: 2024-09-16T17:28:53.595Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:R/I:H/S:U/AV:N/PR:N/C:N/A:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Gain Access Description: IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186324. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6472927 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6472927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186324
CVE ID: CVE-2020-4678 State: PUBLISHED Published: 2020-10-12T13:20:29.489294Z Last Updated: 2024-09-17T01:35:32.159Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/PR:H/AC:L/AV:N/UI:N/I:N/C:H/A:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to. IBM X-Force ID: 186423. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186423
CVE ID: CVE-2020-4679 State: PUBLISHED Published: 2020-10-12T13:20:29.923799Z Last Updated: 2024-09-16T20:59:02.628Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/PR:H/AC:L/AV:N/I:L/UI:R/C:L/A:N/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186424
CVE ID: CVE-2020-4680 State: PUBLISHED Published: 2020-10-12T13:20:30.372984Z Last Updated: 2024-09-16T16:23:05.394Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/PR:L/A:N/C:L/S:C/I:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186426
CVE ID: CVE-2020-4681 State: PUBLISHED Published: 2020-10-12T13:20:30.856767Z Last Updated: 2024-09-17T01:51:29.280Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/S:C/A:N/C:L/PR:L/AC:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186427
CVE ID: CVE-2020-4682 State: PUBLISHED Published: 2021-01-28T12:55:15.366622Z Last Updated: 2024-09-16T19:04:36.558Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AC:H/I:H/S:U/C:H/UI:N/A:H/AV:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Problem Types: Gain Access Description: IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408626 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6408626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186509
CVE ID: CVE-2020-4685 State: PUBLISHED Published: 2020-11-11T12:55:14.029311Z Last Updated: 2024-09-16T23:50:55.144Z Severity: HIGH (CVSS 8 CVSS:3.0/S:C/I:H/C:H/AC:H/A:H/PR:H/UI:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cognos Controller Problem Types: Gain Privileges Description: A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the application is installed, can escalate their privilege from Low level to Super Admin and gain access to Create/Update/Delete any level of user in Cognos Controller. IBM X-Force ID: 186625. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
troller. IBM X-Force ID: 186625. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6339995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186625
CVE ID: CVE-2020-4686 State: PUBLISHED Published: 2020-08-17T12:35:12.569271Z Last Updated: 2024-09-16T16:58:32.365Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/C:H/AV:N/PR:L/UI:N/I:H/S:U/AC:H/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: SAN Volume Controller and Storwize Family Problem Types: Gain Privileges Description: IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6260199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186678
CVE ID: CVE-2020-4687 State: PUBLISHED Published: 2020-08-20T15:55:14.326562Z Last Updated: 2024-09-16T16:23:33.592Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/C:L/S:U/A:N/AV:N/UI:N/AC:L/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6262423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186679
CVE ID: CVE-2020-4688 State: PUBLISHED Published: 2021-01-20T15:00:26.340825Z Last Updated: 2024-09-16T23:01:47.961Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/PR:N/A:L/AC:L/AV:L/UI:N/C:L/I:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6405952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186700
CVE ID: CVE-2020-4689 State: PUBLISHED Published: 2020-10-12T13:20:31.346190Z Last Updated: 2024-09-17T01:36:58.083Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:R/I:H/C:H/A:H/S:U/PR:H/AC:L/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Gain Access Description: IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186696
CVE ID: CVE-2020-4690 State: PUBLISHED Published: 2021-09-23T16:05:24.078687Z Last Updated: 2024-09-16T20:31:47.673Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/A:N/C:H/PR:N/AC:L/S:U/UI:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 186697. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491125 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6491125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186697
CVE ID: CVE-2020-4691 State: PUBLISHED Published: 2021-01-08T20:40:23.887295Z Last Updated: 2024-09-17T01:26:13.702Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/I:L/C:L/AC:L/UI:R/A:N/S:U/PR:L/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Rhapsody Model Manager, Rational Team Concert, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Engineering Test Management, Rational Engineering Lifecycle Manager, Rational Quality Manager, Engineering Workflow Management, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186698