Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4829 State: PUBLISHED Published: 2020-12-10T22:11:07.430051Z Last Updated: 2024-09-16T18:04:01.484Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/PR:N/A:H/I:H/AV:L/S:U/UI:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: VIOS, AIX Problem Types: Gain Privileges Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6380430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189960
CVE ID: CVE-2020-4831 State: PUBLISHED Published: 2021-03-12T16:40:15.499848Z Last Updated: 2024-09-17T03:43:18.799Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/C:H/I:N/A:N/PR:N/AC:H/S:U/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Obtain Information Description: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189965
CVE ID: CVE-2020-4832 State: PUBLISHED Published: 2021-02-05T14:25:12.967151Z Last Updated: 2024-09-16T22:55:20.379Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/AV:L/PR:N/C:H/S:U/I:N/A:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: PowerHA Problem Types: Obtain Information Description: IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6412283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189969
CVE ID: CVE-2020-4838 State: PUBLISHED Published: 2021-01-12T14:45:26.797773Z Last Updated: 2024-09-17T01:25:53.816Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/AC:L/AV:N/S:C/PR:L/UI:N/C:L/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/640
ID: 190036. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6402719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190036
CVE ID: CVE-2020-4839 State: PUBLISHED Published: 2021-05-25T16:00:16.559134Z Last Updated: 2024-09-16T20:31:49.598Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/PR:H/UI:N/AC:L/S:U/A:H/AV:N/I:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: 8335-GTB, 8335-GTA, 8335-GCA Problem Types: Denial of Service Description: IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454303 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/6454303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190037
CVE ID: CVE-2020-4840 State: PUBLISHED Published: 2020-12-21T18:05:24.053524Z Last Updated: 2024-09-16T16:19:00.510Z Severity: HIGH (CVSS 7.4 CVSS:3.0/I:N/UI:R/A:N/PR:N/C:H/S:C/AC:L/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive informatio
malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 190044. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190044
CVE ID: CVE-2020-4841 State: PUBLISHED Published: 2020-12-21T18:05:24.718326Z Last Updated: 2024-09-17T02:01:33.929Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/AC:H/S:U/C:H/PR:N/A:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 190045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages
M X-Force ID: 190045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190045
CVE ID: CVE-2020-4842 State: PUBLISHED Published: 2020-12-21T18:05:25.357488Z Last Updated: 2024-09-16T20:58:59.228Z Severity: LOW (CVSS 2.7 CVSS:3.0/I:N/S:U/AC:L/C:L/AV:N/PR:H/A:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336251 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/6336251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190046
CVE ID: CVE-2020-4843 State: PUBLISHED Published: 2020-12-21T18:05:26.001009Z Last Updated: 2024-09-16T17:58:51.309Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:N/UI:N/A:N/PR:L/S:C/AC:H/C:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6250375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190048
CVE ID: CVE-2020-4845 State: PUBLISHED Published: 2020-12-17T18:40:18.798928Z Last Updated: 2024-09-16T23:31:51.127Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/I:L/AV:N/UI:R/A:N/AC:L/PR:L/RC:C/RL:O/E:H) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190289. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
session. IBM X-Force ID: 190289. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190289
CVE ID: CVE-2020-4846 State: PUBLISHED Published: 2020-12-17T18:40:19.493879Z Last Updated: 2024-09-16T23:50:35.656Z Severity: LOW (CVSS 2.7 CVSS:3.0/PR:H/AC:L/UI:N/A:N/AV:N/C:L/S:U/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190290. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190290
CVE ID: CVE-2020-4848 State: PUBLISHED Published: 2021-03-30T16:00:25.825266Z Last Updated: 2024-09-17T02:22:06.432Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/A:N/C:L/AC:L/S:U/PR:L/I:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: UrbanCode Deploy Problem Types: Gain Privileges Description: IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 190293. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190293
CVE ID: CVE-2020-4849 State: PUBLISHED Published: 2020-12-15T14:45:22.525116Z Last Updated: 2024-09-16T20:47:08.968Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:N/AV:N/UI:R/A:N/S:U/I:H/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Bypass Security Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 190294. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6382116 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6382116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190294
CVE ID: CVE-2020-4850 State: PUBLISHED Published: 2021-05-20T15:10:28.799251Z Last Updated: 2024-09-16T17:14:03.796Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/PR:N/A:N/AV:L/I:N/AC:L/C:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused by the leftover files after configuration. IBM X-Force ID: 190298. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190298
CVE ID: CVE-2020-4851 State: PUBLISHED Published: 2021-03-16T13:55:15.581564Z Last Updated: 2024-09-16T18:29:04.277Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/I:N/AV:L/UI:N/C:L/PR:N/AC:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Data Manipulation Description: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6405774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190450
CVE ID: CVE-2020-4854 State: PUBLISHED Published: 2020-11-23T16:55:20.752454Z Last Updated: 2024-09-16T22:20:27.269Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/UI:N/PR:N/S:U/I:H/A:H/C:H/AC:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367823 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190454 - https://www.tenable.com/security/research/tra-2020-66
CVE ID: CVE-2020-4855 State: PUBLISHED Published: 2021-01-27T16:15:27.177472Z Last Updated: 2024-09-17T01:46:27.762Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/UI:R/S:C/I:L/PR:L/C:L/AV:N/RC:C/RL:O/E:H) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Team Concert, Rational Quality Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Rhapsody Design Manager, Engineering Test Management, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Rational Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190457
CVE ID: CVE-2020-4856 State: PUBLISHED Published: 2021-03-04T19:05:39.571133Z Last Updated: 2024-09-16T19:40:54.180Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/PR:L/A:N/S:C/AC:L/AV:N/UI:N/C:L/I:L/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Team Concert, Engineering Workflow Management, Rational Quality Manager, Engineering Test Management, Engineering Lifecycle Optimization, Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within
aScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190459
CVE ID: CVE-2020-4857 State: PUBLISHED Published: 2021-03-04T19:05:40.309975Z Last Updated: 2024-09-17T03:43:11.419Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/PR:L/A:N/S:C/AC:L/AV:N/UI:N/C:L/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Team Concert, Engineering Workflow Management, Engineering Test Management, Rational DOORS Next Generation, Engineering Lifecycle Optimization Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within
aScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190460
CVE ID: CVE-2020-4863 State: PUBLISHED Published: 2021-03-04T19:05:41.061621Z Last Updated: 2024-09-16T18:34:09.064Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/I:L/C:L/AV:N/AC:L/PR:L/S:C/A:N/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Engineering Workflow Management, Rational Team Concert, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Engineering Test Management Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within
aScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190566
CVE ID: CVE-2020-4864 State: PUBLISHED Published: 2020-10-29T15:50:34.491103Z Last Updated: 2024-09-17T01:56:42.062Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/C:N/I:L/S:U/A:N/AC:L/UI:N/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Resilient OnPrem Problem Types: Bypass Security Description: IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190567
CVE ID: CVE-2020-4865 State: PUBLISHED Published: 2021-01-27T16:15:27.819250Z Last Updated: 2024-09-16T20:21:28.445Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/PR:L/C:L/I:L/AC:L/S:C/UI:R/A:N/RL:O/RC:C/E:H) Vendors: IBM Products: Engineering Lifecycle Optimization, Rational Rhapsody Design Manager, Engineering Test Management, Rational Collaborative Lifecycle Management, Rational Team Concert, Rational Quality Manager, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Rational Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190741
CVE ID: CVE-2020-4866 State: PUBLISHED Published: 2021-03-04T19:05:41.813875Z Last Updated: 2024-09-17T02:52:06.539Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/S:C/PR:L/C:L/I:L/UI:R/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Engineering Workflow Management, Rational Team Concert, Rational Quality Manager, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Engineering Test Management Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus
code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190742
CVE ID: CVE-2020-4868 State: PUBLISHED Published: 2023-07-31T01:37:47.641Z Last Updated: 2024-10-11T14:08:10.928Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: TRIRIGA Application Platform Problem Types: CWE-209 Description: IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190744. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7015393 - https://exchange.xforce.ibmcloud
- CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7015393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190744
CVE ID: CVE-2020-4869 State: PUBLISHED Published: 2021-01-11T17:10:15.276254Z Last Updated: 2024-09-16T22:55:21.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/I:N/AV:N/C:N/UI:N/PR:L/S:U/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacker could send a specially crafted SNMP query to cause the appliance to reload. IBM X-Force ID: 190831. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190831
CVE ID: CVE-2020-4870 State: PUBLISHED Published: 2020-12-21T17:50:32.362789Z Last Updated: 2024-09-17T03:22:23.347Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/AC:H/S:U/UI:N/AV:N/A:H/I:N/C:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ, MQ Appliance Problem Types: Denial of Service Description: IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 190833. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6380742 - https://www.ibm.com/support/pages/node/6386466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190833
CVE ID: CVE-2020-4871 State: PUBLISHED Published: 2021-01-19T15:20:25.504804Z Last Updated: 2024-09-17T02:42:00.506Z Severity: MEDIUM (CVSS 4 CVSS:3.0/PR:N/UI:N/AV:L/A:N/I:N/AC:L/C:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190834
CVE ID: CVE-2020-4873 State: PUBLISHED Published: 2021-01-19T15:20:26.191132Z Last Updated: 2024-09-17T03:49:18.205Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/I:N/AV:N/A:N/AC:L/C:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190836
CVE ID: CVE-2020-4874 State: PUBLISHED Published: 2024-05-03T16:47:19.927Z Last Updated: 2024-08-04T08:14:59.004Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-327 Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190837. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/190837