Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2975 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-17T00:50:57.825Z Vendors: IBM Products: Sametime Problem Types: Cross-Site Scripting Description: IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113935. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113935 - http://www.securityfocus.com/bid/100572
CVE ID: CVE-2016-2976 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T17:18:33.918Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 113936. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113936 - http://www.securityfocus.com/bid/100572
CVE ID: CVE-2016-2977 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T23:16:53.061Z Vendors: IBM Products: Sametime Problem Types: Other Description: IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113937
CVE ID: CVE-2016-2978 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T19:57:06.258Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113938 - http://www.securityfocus.com/bid/100572
CVE ID: CVE-2016-2979 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T19:36:55.053Z Vendors: IBM Products: Sametime Problem Types: Cross-Site Scripting Description: IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113945. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113945 - http://www.securitytracker.com/id/1039231
com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113945 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2980 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-17T02:46:58.231Z Vendors: IBM Products: Sametime Problem Types: Gain Access Description: The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the WebPlayer works. IBM X-Force ID: 113993. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113993 - http://www.ibm.com/support/docview.wss?uid=swg22006447
CVE ID: CVE-2016-2981 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T23:40:14.467Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999965. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999965
CVE ID: CVE-2016-2983 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-17T01:01:43.379Z Vendors: IBM Products: Tealeaf Customer Experience Problem Types: Bypass Security Description: IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of service, or bypass security. IBM X-Force ID: 113999. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006455 - http://www.ibm.com/support/docview.wss?uid=swg22006393 - http://www.securityfocus.com/bid/102891 - https://exchange.xforce.
p://www.ibm.com/support/docview.wss?uid=swg22006393 - http://www.securityfocus.com/bid/102891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113999
CVE ID: CVE-2016-2984 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:14.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92410 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994
CVE ID: CVE-2016-2985 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:14.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92408 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994
CVE ID: CVE-2016-2986 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:14.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6.0.1 iFix6, Rational DOORS Next Generation 6.x before 6.0.1 iFix6, Rational Engineering Lifecycle Manager 6.x before 6.0.1 iFix6, and Rational Rhapsody Design Manager 6.x before 6.0.1 iFix6 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Conta
ated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989940 - http://www.securityfocus.com/bid/92869
CVE ID: CVE-2016-2987 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:14.439Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95109 - https://www.ibm.com/support/docview.wss?uid=swg21996097
CVE ID: CVE-2016-2988 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:14.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple simultaneous logins. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988781
CVE ID: CVE-2016-2989 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92344 - http://www.securitytracker.com/id/1036498 - http://www-01.ibm.com/support/docview.wss?uid=swg21986393
CVE ID: CVE-2016-2991 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:14.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92391 - http://www-01.ibm.com/support/docview.wss?uid=swg21985280
CVE ID: CVE-2016-2992 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-05T23:40:14.310Z Vendors: IBM Corporation Products: BigInsights Problem Types: Cross-Site Scripting Description: IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95979 - http://www.ibm.com/support/docview.wss?uid=swg21987499
CVE ID: CVE-2016-2994 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:14.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000177 - http://www.securityfocus.com/bid/92870
CVE ID: CVE-2016-2995 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-3005, and CVE-2016-3010. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92576 - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid
om/bid/92576 - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929
CVE ID: CVE-2016-2996 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T23:40:14.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988706
CVE ID: CVE-2016-2997 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-3005, and CVE-2016-3010. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www.securityfocus.com/bid/92580 - http://www-01.ibm.com/support/docview.wss?uid
ort/docview.wss?uid=swg21988991 - http://www.securityfocus.com/bid/92580 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929
CVE ID: CVE-2016-2998 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www.securityfocus.com/bid/92578 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929
CVE ID: CVE-2016-2999 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - http://www.securityfocus.com/bid/93147 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067
CVE ID: CVE-2016-3000 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - http://www.securityfocus.com/bid/93166 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067
CVE ID: CVE-2016-3001 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3003 and CVE-2016-3006. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - http://www.securityfocus.com/bid/93172 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067
CVE ID: CVE-2016-3002 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990864 - http://www.securityfocus.com/bid/94331 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039
CVE ID: CVE-2016-3003 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3006. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - http://www.securityfocus.com/bid/93161 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067
CVE ID: CVE-2016-3004 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the set of available applications. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990864 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039 - http://www.securityfocus.com/bid/94332
CVE ID: CVE-2016-3005 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3010. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929 - http://www.securityfocus.c
ort/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929 - http://www.securityfocus.com/bid/92581
CVE ID: CVE-2016-3006 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3003. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - http://www.securityfocus.com/bid/93167 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067
CVE ID: CVE-2016-3007 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:14.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962 - https://www-01.ibm.com/support/docview.wss?uid=swg21989067 - http://www.securityfocus.com/bid/93168
CVE ID: CVE-2016-3008 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988990 - http://www.securityfocus.com/bid/92541
CVE ID: CVE-2016-3009 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94329 - http://www-01.ibm.com/support/docview.wss?uid=swg21990864 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039
CVE ID: CVE-2016-3010 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929 - http://www.securityfocus.c
ort/docview.wss?uid=swg21988991 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929 - http://www.securityfocus.com/bid/92583
CVE ID: CVE-2016-3012 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:15.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92417 - http://www-01.ibm.com/support/docview.wss?uid=swg21988212
CVE ID: CVE-2016-3013 State: PUBLISHED Published: 2017-02-22T19:00:00 Last Updated: 2024-08-05T23:40:15.140Z Vendors: IBM Corporation Products: WebSphere MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference #: 1998661. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96394 - http://www.ibm.com/support/docview.wss?uid=swg21998661
CVE ID: CVE-2016-3014 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Team Concert 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational DOORS Next Generation 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 a
Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037026 - http://www.securityfocus.com/bid/93515 - http://www.securitytracker.com/id/1037025 - http://www.securitytracker.com/id/1037028 - http://www-01.ibm.com/support/docview.wss?uid=swg21992151 - http://www.securitytracker.com/id/1037027