Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4327 State: PUBLISHED Published: 2020-06-24T14:10:21.695404Z Last Updated: 2024-09-16T18:29:46.621Z Severity: LOW (CVSS 2.7 CVSS:3.0/AC:L/A:N/AV:N/S:U/C:L/I:N/UI:N/PR:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 177599. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237260 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/6237260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177599
CVE ID: CVE-2020-4328 State: PUBLISHED Published: 2020-08-03T12:35:37.210570Z Last Updated: 2024-09-16T22:40:11.170Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/C:L/S:U/I:L/A:L/UI:N/AV:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Financial Transaction Manager Problem Types: Data Manipulation Description: IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255154 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177839
CVE ID: CVE-2020-4329 State: PUBLISHED Published: 2020-04-28T13:30:15.230620Z Last Updated: 2024-09-17T04:19:45.527Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/AV:N/C:L/A:N/AC:L/S:U/I:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Liberty, WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841. Additional Analyst Notes: - CVE Program Container: References: - https://ww
ct spoofing attacks. IBM X-Force ID: 177841. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6201862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177841
CVE ID: CVE-2020-4336 State: PUBLISHED Published: 2021-01-06T13:10:14.732601Z Last Updated: 2024-09-16T20:22:17.437Z Severity: LOW (CVSS 3.7 CVSS:3.0/PR:N/AC:H/A:N/S:U/AV:N/C:L/I:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere eXtreme Scale Problem Types: Obtain Information Description: IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6397682 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/6397682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177932
CVE ID: CVE-2020-4337 State: PUBLISHED Published: 2020-09-03T13:55:20.454145Z Last Updated: 2024-09-17T00:01:14.262Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:H/AV:N/PR:N/A:N/UI:R/AC:L/S:U/C:N/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6324763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177933
CVE ID: CVE-2020-4338 State: PUBLISHED Published: 2020-04-16T15:35:21.704224Z Last Updated: 2024-09-17T03:44:17.167Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/PR:N/A:N/I:N/AC:H/AV:L/C:H/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177937
CVE ID: CVE-2020-4340 State: PUBLISHED Published: 2020-09-23T13:45:17.061241Z Last Updated: 2024-09-16T23:26:25.781Z Severity: LOW (CVSS 3.1 CVSS:3.0/UI:R/PR:N/I:L/A:N/AV:N/S:U/C:N/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Bypass Security Description: IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate validation. IBM X-Force ID: 178180. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178180
CVE ID: CVE-2020-4341 State: PUBLISHED Published: 2020-06-24T14:10:22.124051Z Last Updated: 2024-09-16T20:21:35.775Z Severity: LOW (CVSS 2.7 CVSS:3.0/AC:L/A:N/C:L/AV:N/S:U/PR:H/I:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178181. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237084 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/6237084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178181
CVE ID: CVE-2020-4342 State: PUBLISHED Published: 2020-06-24T14:10:22.599907Z Last Updated: 2024-09-16T18:54:31.455Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/I:N/C:L/S:U/AV:N/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user. IBM X-Force ID: 178182. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178182
CVE ID: CVE-2020-4343 State: PUBLISHED Published: 2020-05-14T15:50:45.096688Z Last Updated: 2024-09-17T04:14:03.549Z Severity: HIGH (CVSS 7.8 CVSS:3.0/C:H/PR:N/A:H/AV:L/S:U/UI:R/I:H/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 178244. Additional Analyst Notes: - CVE Program Container: References:
cause the application to crash. IBM X-Force ID: 178244. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178244
CVE ID: CVE-2020-4344 State: PUBLISHED Published: 2020-09-15T13:50:23.669918Z Last Updated: 2024-09-16T19:30:50.662Z Severity: MEDIUM (CVSS 4 CVSS:3.0/PR:N/UI:N/C:L/I:N/AV:L/S:U/AC:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Tivoli Business Service Manager Problem Types: Obtain Information Description: IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 178247. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178247
CVE ID: CVE-2020-4345 State: PUBLISHED Published: 2020-05-17T14:00:18.053863Z Last Updated: 2024-09-16T23:35:48.876Z Severity: LOW (CVSS 2.9 CVSS:3.0/UI:N/C:L/AV:L/AC:H/I:N/S:U/PR:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: i Problem Types: Obtain Information Description: IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178318
CVE ID: CVE-2020-4346 State: PUBLISHED Published: 2020-05-12T13:40:17.772777Z Last Updated: 2024-09-17T02:26:54.160Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AV:N/I:N/S:U/UI:N/AC:L/C:L/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain sensitive information. IBM X-Force ID: 178322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178322
CVE ID: CVE-2020-4347 State: PUBLISHED Published: 2020-04-16T15:35:22.185466Z Last Updated: 2024-09-16T23:16:23.698Z Severity: HIGH (CVSS 7.3 CVSS:3.0/I:L/C:L/S:U/AV:N/AC:L/UI:N/A:L/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6191679 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6191679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178412
CVE ID: CVE-2020-4348 State: PUBLISHED Published: 2020-05-27T13:15:28.309819Z Last Updated: 2024-09-16T22:52:11.368Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/I:H/PR:L/C:N/AV:N/S:U/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Access Description: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6213739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178414
CVE ID: CVE-2020-4349 State: PUBLISHED Published: 2020-05-27T13:15:28.747268Z Last Updated: 2024-09-16T17:18:48.222Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/I:N/PR:N/AV:N/C:H/S:U/UI:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178423
CVE ID: CVE-2020-4350 State: PUBLISHED Published: 2020-05-27T13:15:29.238768Z Last Updated: 2024-09-17T00:06:12.764Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/AV:N/AC:H/UI:N/S:U/I:N/A:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178424. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178424
CVE ID: CVE-2020-4352 State: PUBLISHED Published: 2020-05-29T13:10:20.156736Z Last Updated: 2024-09-16T20:32:05.845Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/UI:N/S:U/AV:L/PR:N/A:L/AC:H/C:L/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: MQ for HPE NonStop Problem Types: Gain Privileges Description: IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6217600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178427
CVE ID: CVE-2020-4353 State: PUBLISHED Published: 2020-04-23T13:10:24.388701Z Last Updated: 2024-09-17T04:19:26.073Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/PR:N/AC:L/AV:P/S:U/A:H/I:N/C:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: MaaS360 Problem Types: Denial of Service Description: IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricted applications and device settings. IBM X-Force ID: 178505. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6151773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178505
CVE ID: CVE-2020-4354 State: PUBLISHED Published: 2021-05-31T15:10:43.266003Z Last Updated: 2024-09-17T02:31:15.742Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/PR:L/C:L/A:N/AC:L/AV:N/UI:R/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178506. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - h
506. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178506 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2020-4355 State: PUBLISHED Published: 2020-07-01T14:25:30.996706Z Last Updated: 2024-09-17T03:07:54.174Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/AV:N/S:U/C:N/UI:N/PR:N/A:L/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507. Additional Analys
could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178507
CVE ID: CVE-2020-4357 State: PUBLISHED Published: 2020-05-27T13:15:29.671414Z Last Updated: 2024-09-17T02:11:27.796Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/I:N/PR:L/S:U/UI:N/AC:L/C:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178761. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214478 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178761
CVE ID: CVE-2020-4358 State: PUBLISHED Published: 2020-05-27T13:15:30.124362Z Last Updated: 2024-09-17T02:58:21.823Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/I:L/A:N/C:L/AV:N/AC:L/UI:R/S:C/RC:C/E:H/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Cross-Site Scripting Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178762. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62144
D: 178762. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178762
CVE ID: CVE-2020-4360 State: PUBLISHED Published: 2020-06-02T13:45:22.062400Z Last Updated: 2024-09-16T22:40:01.223Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AC:L/PR:L/S:C/AV:N/UI:R/A:N/I:L/RL:O/E:H/RC:C) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178765. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62144
D: 178765. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178765
CVE ID: CVE-2020-4361 State: PUBLISHED Published: 2020-07-20T14:05:24.178775Z Last Updated: 2024-09-17T02:57:00.969Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/A:N/I:N/S:U/AV:N/AC:L/UI:N/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTTP responses. IBM X-Force ID: 178766. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6249981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178766
CVE ID: CVE-2020-4362 State: PUBLISHED Published: 2020-04-10T14:00:17.550417Z Last Updated: 2024-09-17T02:53:04.213Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/I:H/A:H/AC:H/AV:N/PR:L/UI:N/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. IBM X-Force ID: 178929. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6174417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178929
CVE ID: CVE-2020-4363 State: PUBLISHED Published: 2020-07-01T14:25:31.439469Z Last Updated: 2024-09-17T02:11:32.782Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/AV:L/S:U/C:H/UI:N/PR:N/A:H/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62423
D: 178960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178960
CVE ID: CVE-2020-4364 State: PUBLISHED Published: 2020-07-14T13:10:19.627051Z Last Updated: 2024-09-17T01:21:47.676Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/C:L/S:C/UI:R/PR:L/A:N/I:L/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178961. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246139 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178961
CVE ID: CVE-2020-4365 State: PUBLISHED Published: 2020-05-14T15:50:45.541755Z Last Updated: 2024-09-17T01:41:04.303Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/S:U/AV:N/A:N/PR:N/C:L/AC:L/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 178964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209099 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6209099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178964
CVE ID: CVE-2020-4366 State: PUBLISHED Published: 2020-06-02T13:45:22.494959Z Last Updated: 2024-09-16T23:06:02.150Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/C:L/S:C/PR:N/A:N/I:L/UI:R/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62144
D: 178965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178965
CVE ID: CVE-2020-4367 State: PUBLISHED Published: 2020-06-02T13:45:22.931426Z Last Updated: 2024-09-16T22:56:27.522Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/C:H/S:U/PR:N/I:N/A:N/UI:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179001. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179001
CVE ID: CVE-2020-4369 State: PUBLISHED Published: 2020-07-22T20:30:34.495008Z Last Updated: 2024-09-16T18:23:45.600Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AC:H/UI:N/S:U/I:N/C:H/PR:N/AV:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179004