Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ww-01.ibm.com/support/docview.wss?uid=swg1PI56757 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764 - http://www-01.ibm.com/support/docview.wss?uid=swg21976392 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763
CVE ID: CVE-2016-0233 State: PUBLISHED Published: 2016-06-28T01:00:00 Last Updated: 2024-08-05T22:15:23.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980989
CVE ID: CVE-2016-0234 State: PUBLISHED Published: 2018-08-30T16:00:00Z Last Updated: 2024-09-16T16:27:59.787Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: OpenPages GRC Platform Problem Types: Obtain Information Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110303 - http://www-01.ibm.com/support/docview.wss?uid=swg21997687
CVE ID: CVE-2016-0235 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T22:15:23.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110326 - http://www-01.ibm.com/support/docview.wss?uid=swg21981748
CVE ID: CVE-2016-0236 State: PUBLISHED Published: 2016-10-21T17:00:00 Last Updated: 2024-08-05T22:15:22.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990372 - http://www.securityfocus.com/bid/93823
CVE ID: CVE-2016-0237 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T22:15:23.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110328 - http://www-01.ibm.com/support/docview.wss?uid=swg21981631
CVE ID: CVE-2016-0238 State: PUBLISHED Published: 2017-07-05T13:00:00Z Last Updated: 2024-09-17T02:16:37.740Z Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409 Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110409 - http://www.securityfocus.com/bid/99379 - http://www.ibm.com/support/docview.wss?uid=swg21989124
CVE ID: CVE-2016-0239 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988999 - http://www.securityfocus.com/bid/93827
CVE ID: CVE-2016-0240 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:22.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990232 - http://www.securityfocus.com/bid/93836
CVE ID: CVE-2016-0241 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93828 - http://www-01.ibm.com/support/docview.wss?uid=swg21990219
CVE ID: CVE-2016-0242 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93825 - http://www-01.ibm.com/support/docview.wss?uid=swg21990229
CVE ID: CVE-2016-0243 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-05T22:15:23.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0244. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI54088 - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www.sec
01.ibm.com/support/docview.wss?uid=swg1PI54088 - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www.securityfocus.com/bid/83488 - http://www.securityfocus.com/bid/100572
CVE ID: CVE-2016-0244 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-05T22:15:22.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0243. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI55327
CVE ID: CVE-2016-0245 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-05T22:15:22.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56682
CVE ID: CVE-2016-0246 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93400 - http://www-01.ibm.com/support/docview.wss?uid=swg21990377
CVE ID: CVE-2016-0247 State: PUBLISHED Published: 2016-10-22T01:00:00 Last Updated: 2024-08-05T22:15:23.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93341 - http://www-01.ibm.com/support/docview.wss?uid=swg21990368
CVE ID: CVE-2016-0248 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T22:15:23.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium 9.0 before p700 and 10.0 before p100 allows man-in-the-middle attackers to obtain sensitive query-string information from SSL sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93137 - http://www-01.ibm.com/support/docview.wss?uid=swg21982031
CVE ID: CVE-2016-0249 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-05T22:15:23.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93339 - http://www-01.ibm.com/support/docview.wss?uid=swg21990363
CVE ID: CVE-2016-0250 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T22:15:23.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110510 - http://www-01.ibm.com/support/docview.wss?uid=swg21977152
CVE ID: CVE-2016-0252 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T22:15:23.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985641
CVE ID: CVE-2016-0253 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110562. Additional Analyst Notes:
ckers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110562. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110562 - http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE ID: CVE-2016-0254 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T22:15:23.193Z Vendors: IBM Products: Cognos Business Intelligence Problem Types: Denial of Service Description: IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service. IBM X-Force ID: 110563. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004036 - http://www.securityfocus.com/bid/98971 - https
r: References: - http://www.ibm.com/support/docview.wss?uid=swg22004036 - http://www.securityfocus.com/bid/98971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/110563
CVE ID: CVE-2016-0255 State: PUBLISHED Published: 2017-05-05T19:00:00 Last Updated: 2024-08-05T22:15:23.190Z Vendors: IBM Corporation Products: Marketing Platform Problem Types: Cross-Site Scripting Description: IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564. Ad
r could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98336 - http://www.ibm.com/support/docview.wss?uid=swg22001950
CVE ID: CVE-2016-0259 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-05T22:15:23.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984561 - http://www.securitytracker.com/id/1036179
CVE ID: CVE-2016-0260 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-05T22:15:23.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by triggering many errors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984564
CVE ID: CVE-2016-0261 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T22:15:23.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5.9 iFix2, 6.1.0 before 6.1.0.1 iFix1, and 6.1.1 before 6.1.1.1 iFix1; and IBM Care Management 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110604. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110604 - http://www-01.ibm.com/support/docview.wss?uid=
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110604 - http://www-01.ibm.com/support/docview.wss?uid=swg21981103
CVE ID: CVE-2016-0262 State: PUBLISHED Published: 2016-03-14T01:00:00 Last Updated: 2024-08-05T22:15:23.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977828
CVE ID: CVE-2016-0263 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-05T22:15:23.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or cause a denial of service via a crafted mmapplypolicy command. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005708 - http://www.securitytracker.com/id/1036458 - http://www.securityfocus.com/bid/90525
CVE ID: CVE-2016-0264 State: PUBLISHED Published: 2016-05-24T15:00:00 Last Updated: 2024-08-05T22:15:23.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980826 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html - http://rhn.red
ocview.wss?uid=swg21980826 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html - http://rhn.redhat.com/errata/RHSA-2016-1039.html - http://rhn.redhat.com/errata/RHSA-2016-0701.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://rhn.redhat.com/errata/RHSA-2016-0708.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html - http:/
ity-announce/2016-05/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV84035 - http://rhn.redhat.com/errata/RHSA-2016-0716.html - http://www.securitytracker.com/id/1035953 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html - http://rhn.redhat.com/errata/RHSA-2016-0702.html - https://access.redhat.com/errata/RHSA-2017:1216
CVE ID: CVE-2016-0265 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T22:15:23.162Z Vendors: IBM Corporation Products: Campaign Problem Types: Cross-Site Scripting Description: IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/s
-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21986033 - http://www.securityfocus.com/bid/95100
CVE ID: CVE-2016-0266 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T22:15:23.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92150 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86117 - http://www.securitytracker.com/id/1036467 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86132 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86118 - htt
p://www-01.ibm.com/support/docview.wss?uid=swg1IV86132 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86118 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86116 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86119 - https://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc - http://www-01.ibm.com/support/docview.wss?uid=swg1IV86120
CVE ID: CVE-2016-0267 State: PUBLISHED Published: 2016-06-29T01:00:00 Last Updated: 2024-08-05T22:15:23.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via (1) the server UI or (2) a database request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000151
CVE ID: CVE-2016-0268 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T22:15:23.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915. Additional Analyst Notes: -
nticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE ID: CVE-2016-0269 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T22:15:23.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91690 - http://www-01.ibm.com/support/docview.wss?uid=swg21985734
CVE ID: CVE-2016-0270 State: PUBLISHED Published: 2017-02-08T16:00:00 Last Updated: 2024-08-05T22:15:23.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack." NOTE: this CVE has been incorrectly used for GCM nonce reuse issues in other products; see CVE-2016-10213 for the A10 issue, CVE-2016-10212 for the Radware issue, and CVE-2017-5933 for the Citrix issue. Additional Analyst Notes
or the A10 issue, CVE-2016-10212 for the Radware issue, and CVE-2017-5933 for the Citrix issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96062 - http://www-01.ibm.com/support/docview.wss?uid=swg21979604 - https://github.com/nonce-disrespect/nonce-disrespect - http://www-01.ibm.com/support/docview.wss?uid=swg21979673 - https://support.citrix.com/article/CTX220329 - http://www-01.ibm.com/support/docview.wss?uid=swg21979669 - http://www.securitytracker.com/id/1037795