Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cause the Spectrum Protect server to crash. IBM X-Force ID: 179990. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6195706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179990
CVE ID: CVE-2020-4419 State: PUBLISHED Published: 2020-05-28T14:45:38.149759Z Last Updated: 2024-09-16T22:30:52.424Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/AC:L/A:N/C:L/AV:N/S:C/I:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180071. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
n. IBM X-Force ID: 180071. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6217403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180071
CVE ID: CVE-2020-4420 State: PUBLISHED Published: 2020-07-01T14:25:33.640391Z Last Updated: 2024-09-16T20:52:33.109Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:N/AV:N/S:U/C:N/PR:N/UI:N/A:H/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242362 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/6242362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180076
CVE ID: CVE-2020-4421 State: PUBLISHED Published: 2020-05-06T13:45:19.320756Z Last Updated: 2024-09-17T02:10:42.194Z Severity: MEDIUM (CVSS 5 CVSS:3.0/A:L/I:L/AV:N/AC:H/S:U/C:L/PR:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Gain Privileges Description: IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6205926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180084
CVE ID: CVE-2020-4422 State: PUBLISHED Published: 2020-05-14T15:50:45.983110Z Last Updated: 2024-09-17T01:46:17.057Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/A:H/C:H/PR:N/UI:R/S:U/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 180167. Additional Analyst Notes: - CVE Program Container: Referenc
m or cause the application to crash. IBM X-Force ID: 180167. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180167
CVE ID: CVE-2020-4427 State: PUBLISHED Published: 2020-05-07T19:20:18.815Z Last Updated: 2025-11-03T21:44:23.533Z Severity: CRITICAL (CVSS 9 CVSS:3.0/I:H/UI:N/PR:N/C:H/A:H/AV:N/S:C/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Bypass Security Description: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532. Additional Analyst Notes: - CVE Program C
ess and gain full administrative access to the system. IBM X-Force ID: 180532. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6206875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180532
CVE ID: CVE-2020-4428 State: PUBLISHED Published: 2020-05-07T19:20:19.315Z Last Updated: 2025-11-03T21:44:26.545Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AC:L/AV:N/S:C/A:H/C:H/PR:H/UI:N/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Gain Access Description: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6206875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180533
CVE ID: CVE-2020-4429 State: PUBLISHED Published: 2020-05-07T19:20:19.816Z Last Updated: 2025-11-03T21:44:29.648Z Severity: CRITICAL (CVSS 10 CVSS:3.0/S:C/AV:N/A:H/AC:L/PR:N/C:H/I:H/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Gain Access Description: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6206875 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6206875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180534
CVE ID: CVE-2020-4430 State: PUBLISHED Published: 2020-05-07T19:20:20.323Z Last Updated: 2025-11-03T21:44:32.614Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AV:N/A:N/AC:L/C:L/PR:L/UI:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6206875 - https://exch
Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6206875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180535
CVE ID: CVE-2020-4431 State: PUBLISHED Published: 2020-06-02T13:45:23.412729Z Last Updated: 2024-09-16T23:15:43.135Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/C:L/S:C/PR:L/A:N/UI:R/I:L/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180761. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62144
D: 180761. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180761
CVE ID: CVE-2020-4432 State: PUBLISHED Published: 2020-06-10T12:57:52.760133Z Last Updated: 2024-09-16T18:29:54.370Z Severity: HIGH (CVSS 7.5 CVSS:3.0/C:H/A:H/AV:N/PR:L/S:U/I:H/AC:H/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Aspera Streaming, Aspera High-Speed Transfer Endpoint, Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I), Aspera Server On Demand, Aspera Faspex On Demand, Aspera Proxy Server, Aspera Application Platform On Demand, Aspera Shares On Demand, Aspera High-Speed Transfer Server, Aspera Transfer Cluster Manager Problem Types: Gain Privileges Description: Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which
eges Description: Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180810
CVE ID: CVE-2020-4433 State: PUBLISHED Published: 2020-06-10T12:57:53.201570Z Last Updated: 2024-09-16T23:46:28.317Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:H/I:H/UI:N/PR:L/S:U/C:H/AV:N/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: Aspera Faspex On Demand, Aspera Server On Demand, Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I), Aspera High-Speed Transfer Endpoint, Aspera Streaming, Aspera Transfer Cluster Manager, Aspera High-Speed Transfer Server, Aspera Shares On Demand, Aspera Application Platform On Demand, Aspera Proxy Server Problem Types: Gain Privileges Description: Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bo
eges Description: Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180814
CVE ID: CVE-2020-4434 State: PUBLISHED Published: 2020-06-10T12:57:53.734634Z Last Updated: 2024-09-17T00:16:16.295Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:H/I:H/UI:N/A:H/AV:N/C:H/S:U/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Aspera Shares On Demand, Aspera Application Platform On Demand, Aspera Transfer Cluster Manager, Aspera High-Speed Transfer Server, Aspera Proxy Server, Aspera Faspex On Demand, Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I), Aspera High-Speed Transfer Endpoint, Aspera Streaming, Aspera Server On Demand Problem Types: Gain Privileges Description: Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration a
eges Description: Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180900
CVE ID: CVE-2020-4435 State: PUBLISHED Published: 2020-06-10T12:57:54.172541Z Last Updated: 2024-09-16T22:57:12.113Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:H/AC:H/UI:N/A:H/AV:N/C:H/S:U/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Aspera Transfer Cluster Manager, Aspera High-Speed Transfer Server, Aspera Shares On Demand, Aspera Application Platform On Demand, Aspera Proxy Server, Aspera Faspex On Demand, Aspera Server On Demand, Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I), Aspera Streaming, Aspera High-Speed Transfer Endpoint Problem Types: Gain Privileges Description: Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product con
eges Description: Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180901
CVE ID: CVE-2020-4436 State: PUBLISHED Published: 2020-06-10T12:57:54.614787Z Last Updated: 2024-09-16T22:56:39.683Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/A:H/C:H/S:U/PR:L/AC:L/UI:N/I:H/RL:O/E:U/RC:C) Vendors: IBM Products: Aspera Faspex On Demand, Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I), Aspera High-Speed Transfer Endpoint, Aspera Streaming, Aspera Server On Demand, Aspera Shares On Demand, Aspera Application Platform On Demand, Aspera Transfer Cluster Manager, Aspera High-Speed Transfer Server, Aspera Proxy Server Problem Types: Gain Privileges Description: Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which co
eges Description: Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/180902
CVE ID: CVE-2020-4445 State: PUBLISHED Published: 2020-09-02T18:25:24.362761Z Last Updated: 2024-09-17T03:23:17.602Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/S:C/C:L/PR:L/UI:R/A:N/I:L/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Quality Manager, Rational Team Concert, Rational DOORS Next Generation, Engineering Workflow Management Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM
UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6325343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181122
CVE ID: CVE-2020-4446 State: PUBLISHED Published: 2020-05-06T13:45:19.952281Z Last Updated: 2024-09-16T20:06:31.639Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AV:N/A:N/UI:N/PR:L/S:U/C:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Business Process Manager Standard, Business Automation Workflow Problem Types: Bypass Security Description: IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 181126. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6205805
181126. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6205805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181126
CVE ID: CVE-2020-4447 State: PUBLISHED Published: 2020-07-23T16:05:15.286725Z Last Updated: 2024-09-16T23:06:34.825Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/C:L/S:C/A:N/AC:L/PR:L/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: FileNet Content Manager Problem Types: Cross-Site Scripting Description: IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181227. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 181227. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181227
CVE ID: CVE-2020-4448 State: PUBLISHED Published: 2020-06-05T12:55:17.738947Z Last Updated: 2024-09-16T20:58:31.822Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/S:U/I:H/A:H/UI:N/AC:L/PR:N/C:H/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220336 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6220336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181228 - https://www.zerodayinitiative.com/advisories/ZDI-20-688/
CVE ID: CVE-2020-4449 State: PUBLISHED Published: 2020-06-05T12:55:18.184565Z Last Updated: 2024-09-16T23:11:10.661Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:N/I:N/S:U/PR:N/C:H/AV:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181230. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181230 - https://www.
ps://www.ibm.com/support/pages/node/6220296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181230 - https://www.zerodayinitiative.com/advisories/ZDI-20-690/
CVE ID: CVE-2020-4450 State: PUBLISHED Published: 2020-06-05T12:55:18.635858Z Last Updated: 2024-09-16T22:30:00.992Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/UI:N/AV:N/C:H/PR:N/AC:L/I:H/S:U/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181231. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181231 - https://www.zeroda
ww.ibm.com/support/pages/node/6220294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181231 - https://www.zerodayinitiative.com/advisories/ZDI-20-689/
CVE ID: CVE-2020-4452 State: PUBLISHED Published: 2020-06-29T13:30:13.851448Z Last Updated: 2024-09-16T16:58:18.686Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/S:U/C:H/AV:N/PR:N/I:N/UI:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 181324. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6240322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181324
CVE ID: CVE-2020-4459 State: PUBLISHED Published: 2020-08-04T16:00:25.928478Z Last Updated: 2024-09-16T20:31:56.852Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/UI:N/PR:N/S:U/A:N/I:N/AC:H/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255614 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181395
CVE ID: CVE-2020-4461 State: PUBLISHED Published: 2020-05-20T12:35:12.314953Z Last Updated: 2024-09-16T22:26:20.148Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:N/AV:N/UI:N/AC:L/PR:L/A:N/I:H/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Bypass Security Description: IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6211847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181481
CVE ID: CVE-2020-4462 State: PUBLISHED Published: 2020-07-16T15:05:35.729638Z Last Updated: 2024-09-16T16:53:09.458Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:U/AC:L/I:N/A:L/C:H/UI:N/PR:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling Secure Proxy, External Authentication Server, Sterling External Authentication Server Problem Types: Obtain Information Description: IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory reso
sing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6249331 - https://www.ibm.com/support/pages/node/6249317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181482
CVE ID: CVE-2020-4463 State: PUBLISHED Published: 2020-07-29T14:05:29.553567Z Last Updated: 2024-09-16T21:02:19.753Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:U/PR:N/UI:N/AV:N/I:N/C:H/AC:L/A:L/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181484. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253953 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181484
CVE ID: CVE-2020-4464 State: PUBLISHED Published: 2020-07-17T13:45:14.587884Z Last Updated: 2024-09-17T02:47:46.419Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/PR:L/S:U/AV:N/I:H/UI:N/C:H/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafted sequence of serialized objects over the SOAP connector. IBM X-Force ID: 181489. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6250059 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/6250059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181489 - https://www.zerodayinitiative.com/advisories/ZDI-20-878/