Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0306 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-05T22:15:23.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56190 - http://www.securityfocus.com/bid/85978 - http://www-01.ibm.com/support/docview.wss?uid=swg21979231
CVE ID: CVE-2016-0307 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-05T22:15:23.349Z Vendors: IBM Corporation Products: Connections Problem Types: Obtain Information Description: IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92440 - http://www.ibm.com/support/docview.wss?uid=swg21986770
CVE ID: CVE-2016-0308 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-05T22:15:23.180Z Vendors: IBM Corporation Products: Connections Problem Types: Gain Access Description: IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate background images. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21986770 - http://www.securityfocus.com/bid/92439
CVE ID: CVE-2016-0310 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-05T22:15:23.387Z Vendors: IBM Corporation Products: Connections Problem Types: Gain Access Description: IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21988338 - http://www.securityfocus.com/bid/92437
CVE ID: CVE-2016-0311 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21986853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111480 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-cross-site-scripting-vulner
.ibmcloud.com/vulnerabilities/111480 - https://www.ibm.com/blogs/psirt/ibm-security-bulletin-cross-site-scripting-vulnerability-in-tivoli-business-service-manager-cve-2016-0311/
CVE ID: CVE-2016-0312 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:23.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21979762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111486
CVE ID: CVE-2016-0313 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0350. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-0314 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91697 - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-0315 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE ID: CVE-2016-0316 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T22:15:23.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92472 - http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE ID: CVE-2016-0317 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T22:15:23.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983137 - http://www.securityfocus.com/bid/92463
CVE ID: CVE-2016-0318 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T22:15:23.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983137 - http://www.securityfocus.com/bid/92466
CVE ID: CVE-2016-0319 State: PUBLISHED Published: 2016-11-25T20:00:00 Last Updated: 2024-08-05T22:15:23.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92475 - http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE ID: CVE-2016-0320 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-05T22:15:23.380Z Vendors: IBM Corporation Products: UrbanCode Deploy Problem Types: Bypass Security Description: IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95974 - http://www.ibm.com/support/docview.wss?uid=swg2C1000222
CVE ID: CVE-2016-0321 State: PUBLISHED Published: 2016-07-17T22:00:00 Last Updated: 2024-08-05T22:15:23.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981692 - http://www.securityfocus.com/bid/91751 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006
CVE ID: CVE-2016-0322 State: PUBLISHED Published: 2016-06-30T01:00:00 Last Updated: 2024-08-05T22:15:23.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML by uploading an HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO88783 - http://www-01.ibm.com/support/docview.wss?uid=swg21982611
CVE ID: CVE-2016-0323 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-05T22:15:23.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21979682
CVE ID: CVE-2016-0324 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T22:15:23.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute arbitrary code with administrator privileges via unspecified vectors. IBM X-Force ID: 111640. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111640
CVE ID: CVE-2016-0325 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T22:15:23.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecyc
xt Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allow remote authenticated users to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94539
CVE ID: CVE-2016-0326 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93824 - http://www-01.ibm.com/support/docview.wss?uid=swg21989735
CVE ID: CVE-2016-0327 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T22:15:24.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified vectors. IBM X-Force ID: 111643. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111643
CVE ID: CVE-2016-0328 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990226 - http://www.securityfocus.com/bid/93402
CVE ID: CVE-2016-0329 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:23.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before 10.0.1.3_iFix3, 10.0.2.x before 10.0.2.8_iFix1, 10.0.4.0 before 10.0.4.0_iFix8, and 10.1.0.0 before 10.1.0.0_iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 111692. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111692 - http://www-01.ibm.com/support/docview.wss?uid=
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111692 - http://www-01.ibm.com/support/docview.wss?uid=swg21982629
CVE ID: CVE-2016-0330 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985736 - http://www.securitytracker.com/id/1036255
CVE ID: CVE-2016-0331 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-05T22:15:24.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92840 - http://www.securitytracker.com/id/1036814 - http://www-01.ibm.com/support/docview.wss?uid=swg21989899
CVE ID: CVE-2016-0332 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T22:15:23.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111695
CVE ID: CVE-2016-0335 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T22:15:23.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. IBM X-Force ID: 111736. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111736
CVE ID: CVE-2016-0336 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T22:15:23.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111737. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111737
CVE ID: CVE-2016-0338 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:23.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2) examining a process. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985736 - http://www.securitytracker.com/id/1036255
CVE ID: CVE-2016-0339 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:23.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records." Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985736 - http://www.securityfocus.com/bid/91689 - http://www.securitytracker.com/id/1036255
CVE ID: CVE-2016-0340 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:23.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985736 - http://www.securitytracker.com/id/1036255 - http://www.securityfocus.com/bid/91692
CVE ID: CVE-2016-0341 State: PUBLISHED Published: 2016-05-15T01:00:00 Last Updated: 2024-08-05T22:15:23.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835 - http://www-01.ibm.com/support/docview.wss?uid=swg21981462
CVE ID: CVE-2016-0342 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T22:15:24.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111783
CVE ID: CVE-2016-0343 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/111784 - http://www-01.ibm.com/support/docview.wss?uid=swg21980229
CVE ID: CVE-2016-0344 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:23.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980234 - http://exchange.xforce.ibmcloud.com/vulnerabilities/111785
CVE ID: CVE-2016-0345 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:23.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786. Additional Analyst Notes: - CVE Program Container: References: - http://exchange.xforce.ibmcloud.com/vulnerabilities/111786 - http://www-01.ibm.com/support/docview.wss?uid=swg21980233
CVE ID: CVE-2016-0346 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T22:15:24.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984323 - http://www.securityfocus.com/bid/85864 - http://www.securitytracker.com/id/1036221
CVE ID: CVE-2016-0348 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-05T22:15:24.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/111813
CVE ID: CVE-2016-0349 State: PUBLISHED Published: 2016-06-30T01:00:00 Last Updated: 2024-08-05T22:15:24.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036185 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55701 - http://www-01.ibm.com/support/docview.wss?uid=swg21981094