Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4875 State: PUBLISHED Published: 2022-01-21T17:20:17.045232Z Last Updated: 2024-09-16T17:28:17.395Z Severity: HIGH (CVSS 7.1 CVSS:3.0/UI:N/AV:N/AC:L/I:N/PR:L/S:U/A:L/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190838. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforc
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190838
CVE ID: CVE-2020-4876 State: PUBLISHED Published: 2022-01-21T17:20:18.549849Z Last Updated: 2024-09-17T01:16:21.103Z Severity: HIGH (CVSS 7.1 CVSS:3.0/C:H/A:L/PR:L/S:U/I:N/AC:L/AV:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190839. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforc
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190839
CVE ID: CVE-2020-4877 State: PUBLISHED Published: 2022-01-21T17:20:20.280563Z Last Updated: 2024-09-17T00:11:58.096Z Severity: HIGH (CVSS 7.3 CVSS:3.0/I:L/UI:N/AV:N/AC:L/A:L/C:L/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Gain Privileges Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190843
CVE ID: CVE-2020-4879 State: PUBLISHED Published: 2022-01-21T17:20:21.768568Z Last Updated: 2024-09-16T17:23:10.228Z Severity: HIGH (CVSS 7.3 CVSS:3.0/C:L/A:L/S:U/PR:N/I:L/AC:L/AV:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Controller Problem Types: Gain Privileges Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190847
CVE ID: CVE-2020-4881 State: PUBLISHED Published: 2021-01-19T15:20:26.824350Z Last Updated: 2024-09-17T02:56:27.847Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/C:H/S:U/PR:N/UI:N/AV:N/A:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 190851. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 190851. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190851
CVE ID: CVE-2020-4882 State: PUBLISHED Published: 2021-03-22T17:00:15.627888Z Last Updated: 2024-09-16T20:57:25.130Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/AC:L/A:N/UI:R/AV:N/I:L/PR:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6430643 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6430643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190852
CVE ID: CVE-2020-4883 State: PUBLISHED Published: 2021-05-05T15:45:30.594762Z Last Updated: 2024-09-17T04:04:17.900Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/I:N/S:U/C:L/PR:L/AV:N/UI:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force ID: 190907. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190907
CVE ID: CVE-2020-4884 State: PUBLISHED Published: 2021-03-30T16:00:26.474707Z Last Updated: 2024-09-16T16:18:36.483Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/AV:L/A:N/UI:N/AC:L/I:N/PR:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 190908. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190908
CVE ID: CVE-2020-4885 State: PUBLISHED Published: 2021-06-24T18:45:24.474273Z Last Updated: 2024-09-17T02:21:01.581Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/PR:N/AC:L/S:U/C:N/UI:N/A:N/I:H/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux and UNIX Problem Types: Data Manipulation Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic link,. IBM X-Force ID: 190909. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190909 - https://security.
www.ibm.com/support/pages/node/6466363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190909 - https://security.netapp.com/advisory/ntap-20210720-0006/
CVE ID: CVE-2020-4886 State: PUBLISHED Published: 2020-11-13T15:10:16.765028Z Last Updated: 2024-09-16T19:45:53.057Z Severity: MEDIUM (CVSS 4 CVSS:3.0/PR:N/A:N/AV:L/AC:L/S:U/UI:N/C:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6366715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190910
CVE ID: CVE-2020-4887 State: PUBLISHED Published: 2021-01-20T15:00:27.437225Z Last Updated: 2024-09-16T19:56:36.264Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:N/I:H/AC:L/AV:L/A:N/S:U/PR:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: AIX, VIOS Problem Types: Data Manipulation Description: IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6406022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190911
CVE ID: CVE-2020-4888 State: PUBLISHED Published: 2021-01-28T12:55:15.998578Z Last Updated: 2024-09-17T03:32:59.470Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/AC:L/C:L/S:U/UI:N/A:L/AV:N/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912. Additional Analyst No
ld exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6409306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190912
CVE ID: CVE-2020-4889 State: PUBLISHED Published: 2021-01-26T14:25:16.856598Z Last Updated: 2024-09-17T02:20:39.274Z Severity: MEDIUM (CVSS 4 CVSS:3.0/PR:N/UI:N/AV:L/I:L/AC:L/C:N/A:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: File Manipulation Description: IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6405776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190971
CVE ID: CVE-2020-4890 State: PUBLISHED Published: 2021-03-16T13:55:16.333256Z Last Updated: 2024-09-16T20:31:25.623Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:H/AV:L/I:N/UI:N/C:N/PR:H/AC:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6430147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190973
CVE ID: CVE-2020-4891 State: PUBLISHED Published: 2021-03-16T13:55:16.975172Z Last Updated: 2024-09-17T00:16:08.376Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/AV:L/I:N/C:H/A:N/S:U/PR:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account credentials. IBM X-Force ID: 190974. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6430147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190974
CVE ID: CVE-2020-4892 State: PUBLISHED Published: 2021-01-07T17:40:27.447452Z Last Updated: 2024-09-16T18:54:37.967Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/A:N/PR:L/C:L/S:C/UI:R/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: Emptoris Contract Management Problem Types: Cross-Site Scripting Description: IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages
M X-Force ID: 190979. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190979
CVE ID: CVE-2020-4893 State: PUBLISHED Published: 2021-01-07T17:40:28.080707Z Last Updated: 2024-09-16T22:36:16.982Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/S:U/C:H/UI:N/AV:N/A:N/PR:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Obtain Information Description: IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398282 - https://exchange.xforce.ibmcloud.com/vulnerabili
ntainer: References: - https://www.ibm.com/support/pages/node/6398282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190984
CVE ID: CVE-2020-4895 State: PUBLISHED Published: 2021-01-07T17:40:28.748680Z Last Updated: 2024-09-17T01:00:43.836Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/C:L/S:C/AV:N/A:N/AC:L/PR:L/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Emptoris Sourcing Problem Types: Cross-Site Scripting Description: IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190986. Additional Analyst Notes: - CVE Program Container: References: - https://w
in a trusted session. IBM X-Force ID: 190986. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190986
CVE ID: CVE-2020-4896 State: PUBLISHED Published: 2021-01-07T17:40:29.367042Z Last Updated: 2024-09-16T16:18:21.575Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:L/UI:N/C:L/S:U/A:N/AC:L/PR:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Emptoris Sourcing Problem Types: Gain Access Description: IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190987
CVE ID: CVE-2020-4897 State: PUBLISHED Published: 2021-01-07T17:40:29.989612Z Last Updated: 2024-09-17T03:14:32.561Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/PR:N/A:N/AC:L/AV:N/UI:N/S:U/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Emptoris Contract Management, Emptoris Spend Analysis Problem Types: Obtain Information Description: IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190988. Additional Analyst Notes: - CVE Program Container: Refer
in further attacks against the system. IBM X-Force ID: 190988. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398276 - https://www.ibm.com/support/pages/node/6398280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190988
CVE ID: CVE-2020-4898 State: PUBLISHED Published: 2021-01-07T17:40:30.652729Z Last Updated: 2024-09-16T17:59:46.347Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/PR:N/A:N/AC:H/C:H/S:U/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Obtain Information Description: IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190989
CVE ID: CVE-2020-4899 State: PUBLISHED Published: 2021-01-05T15:10:19.626424Z Last Updated: 2024-09-16T19:41:12.703Z Severity: HIGH (CVSS 7.4 CVSS:3.0/S:U/AC:H/AV:N/I:H/A:N/UI:N/C:H/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6395568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190990
CVE ID: CVE-2020-4900 State: PUBLISHED Published: 2020-11-30T15:30:31.161359Z Last Updated: 2024-09-16T19:40:34.582Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/I:N/AC:H/PR:N/AV:L/C:H/S:U/UI:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 190991. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6373004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190991
CVE ID: CVE-2020-4901 State: PUBLISHED Published: 2021-05-07T15:45:13.770594Z Last Updated: 2024-09-17T00:51:56.265Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:U/AV:A/AC:L/I:N/A:L/PR:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6450435 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6450435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190992
CVE ID: CVE-2020-4902 State: PUBLISHED Published: 2021-07-01T15:40:12.598009Z Last Updated: 2024-09-16T21:07:25.677Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/S:U/PR:L/C:L/AV:N/I:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Datacap Navigator Problem Types: Data Manipulation Description: IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468405 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191045
CVE ID: CVE-2020-4903 State: PUBLISHED Published: 2021-03-08T18:00:25.563730Z Last Updated: 2024-09-16T18:23:17.758Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/S:U/C:L/A:N/AC:H/UI:N/PR:N/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate the registered user or obtain sensitive information. IBM X-Force ID: 191105. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6426703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191105
CVE ID: CVE-2020-4904 State: PUBLISHED Published: 2020-12-16T20:35:27.394820Z Last Updated: 2024-09-16T22:30:25.487Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/AV:N/AC:L/S:U/PR:N/C:N/A:N/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Financial Transaction Manager Problem Types: Gain Access Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191106
CVE ID: CVE-2020-4905 State: PUBLISHED Published: 2020-12-16T20:35:28.033402Z Last Updated: 2024-09-16T19:30:11.428Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/PR:N/I:N/A:N/AV:N/AC:H/UI:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191109
CVE ID: CVE-2020-4906 State: PUBLISHED Published: 2020-12-16T20:35:28.667615Z Last Updated: 2024-09-16T17:48:50.224Z Severity: MEDIUM (CVSS 4 CVSS:3.0/PR:N/C:L/A:N/I:N/UI:N/AV:L/AC:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191110
CVE ID: CVE-2020-4907 State: PUBLISHED Published: 2020-12-16T20:35:29.313089Z Last Updated: 2024-09-17T02:37:04.211Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:L/A:N/I:N/UI:N/AC:L/AV:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - http
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191112
CVE ID: CVE-2020-4908 State: PUBLISHED Published: 2020-12-16T20:35:29.958856Z Last Updated: 2024-09-17T00:05:32.946Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/A:N/C:L/PR:N/S:U/AC:L/AV:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6371260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191113
CVE ID: CVE-2020-4909 State: PUBLISHED Published: 2021-01-04T14:00:33.475725Z Last Updated: 2024-09-16T17:14:19.554Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/A:N/S:C/C:L/UI:R/AC:L/PR:H/I:L/E:H/RL:O/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191273. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exc