Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 171822. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171822
CVE ID: CVE-2019-4687 State: PUBLISHED Published: 2021-01-13T17:40:20.027275Z Last Updated: 2024-09-17T04:13:56.007Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/C:L/AV:N/I:N/PR:N/UI:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403331 - https://exchange
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171823
CVE ID: CVE-2019-4688 State: PUBLISHED Published: 2020-08-26T19:00:37.059265Z Last Updated: 2024-09-16T16:23:24.830Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/UI:N/C:L/PR:N/I:N/AC:H/S:U/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-For
e will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 171825. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171825
CVE ID: CVE-2019-4689 State: PUBLISHED Published: 2020-08-26T19:00:37.495020Z Last Updated: 2024-09-16T23:36:27.242Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/S:U/AC:H/PR:N/I:N/C:H/UI:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 171826. Additional Analyst Notes: - CVE Program Container: References: - ht
an in the middle techniques. IBM X-Force ID: 171826. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171826
CVE ID: CVE-2019-4691 State: PUBLISHED Published: 2020-08-26T19:00:37.922257Z Last Updated: 2024-09-16T16:17:49.514Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AV:N/AC:L/I:L/PR:L/C:L/UI:R/A:N/E:H/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Cross-Site Scripting Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171828. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
usted session. IBM X-Force ID: 171828. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171828
CVE ID: CVE-2019-4692 State: PUBLISHED Published: 2020-08-26T19:00:38.406689Z Last Updated: 2024-09-17T01:50:59.654Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/S:U/PR:N/I:N/C:L/A:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171829
CVE ID: CVE-2019-4693 State: PUBLISHED Published: 2020-08-26T19:00:38.830123Z Last Updated: 2024-09-17T00:21:20.423Z Severity: MEDIUM (CVSS 6 CVSS:3.0/C:H/UI:N/A:N/AV:L/S:C/AC:L/I:N/PR:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171831
CVE ID: CVE-2019-4694 State: PUBLISHED Published: 2020-08-26T19:00:39.305436Z Last Updated: 2024-09-16T23:15:33.856Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:C/AV:N/AC:H/PR:N/I:N/C:H/UI:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171832. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 -
71832. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171832
CVE ID: CVE-2019-4695 State: PUBLISHED Published: 2020-08-26T19:15:15.231217Z Last Updated: 2024-09-16T22:34:58.075Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/UI:N/C:L/S:U/A:N/AC:L/PR:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171926
CVE ID: CVE-2019-4697 State: PUBLISHED Published: 2020-08-26T19:00:39.881082Z Last Updated: 2024-09-16T16:28:50.877Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/PR:L/S:U/AV:N/AC:H/UI:N/A:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171928
CVE ID: CVE-2019-4698 State: PUBLISHED Published: 2020-08-26T19:00:40.413417Z Last Updated: 2024-09-16T19:19:07.185Z Severity: HIGH (CVSS 7.4 CVSS:3.0/PR:N/I:N/AV:N/S:C/AC:L/UI:R/A:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 171929. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171929
CVE ID: CVE-2019-4699 State: PUBLISHED Published: 2020-08-26T19:00:40.838901Z Last Updated: 2024-09-16T23:31:38.957Z Severity: LOW (CVSS 2.7 CVSS:3.0/I:N/PR:H/AC:L/AV:N/S:U/A:N/UI:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 171931. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171931
CVE ID: CVE-2019-4701 State: PUBLISHED Published: 2020-08-26T19:00:41.274020Z Last Updated: 2024-09-16T17:18:24.414Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/S:U/I:N/PR:N/C:L/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171936
CVE ID: CVE-2019-4702 State: PUBLISHED Published: 2021-01-13T17:40:20.775780Z Last Updated: 2024-09-16T17:28:57.203Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/PR:L/I:L/UI:N/S:U/A:N/AC:H/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Gain Access Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171937
CVE ID: CVE-2019-4703 State: PUBLISHED Published: 2020-02-24T15:35:30.072297Z Last Updated: 2024-09-16T19:31:19.876Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/S:U/AV:A/I:N/UI:N/C:H/AC:H/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3177915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172013
CVE ID: CVE-2019-4704 State: PUBLISHED Published: 2020-07-01T14:25:29.622432Z Last Updated: 2024-09-16T18:03:51.287Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/PR:N/UI:N/A:N/AC:H/I:N/AV:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Manager Virtual Appliance Problem Types: Obtain Information Description: IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffi
o. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 172014. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172014
CVE ID: CVE-2019-4705 State: PUBLISHED Published: 2020-07-01T14:25:30.057615Z Last Updated: 2024-09-17T02:21:16.465Z Severity: LOW (CVSS 2.7 CVSS:3.0/C:L/PR:H/UI:N/A:N/AC:L/I:N/AV:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Manager Virtual Appliance Problem Types: Obtain Information Description: IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 172015. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172015
CVE ID: CVE-2019-4706 State: PUBLISHED Published: 2020-07-01T14:25:30.506150Z Last Updated: 2024-09-16T16:44:09.685Z Severity: LOW (CVSS 2.7 CVSS:3.0/AC:L/A:N/UI:N/PR:H/C:L/S:U/AV:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Manager Virtual Appliance Problem Types: Obtain Information Description: IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. IBM X-Force ID: 172016. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242348 - https://exchange.xforce.ibmcloud.com/vulnerabi
Container: References: - https://www.ibm.com/support/pages/node/6242348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172016
CVE ID: CVE-2019-4707 State: PUBLISHED Published: 2020-01-28T18:30:57.548512Z Last Updated: 2024-09-16T18:02:51.935Z Severity: HIGH (CVSS 7.1 CVSS:3.0/I:N/AC:L/C:H/AV:N/PR:L/UI:N/S:U/A:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172018. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1284034 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1284034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172018
CVE ID: CVE-2019-4713 State: PUBLISHED Published: 2020-08-26T19:00:41.698612Z Last Updated: 2024-09-16T18:49:30.400Z Severity: HIGH (CVSS 8.8 CVSS:3.0/C:H/UI:N/A:H/AV:N/S:U/AC:L/I:H/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Gain Access Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/63
e ID: 172084. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172084
CVE ID: CVE-2019-4715 State: PUBLISHED Published: 2019-12-11T14:25:18.166461Z Last Updated: 2024-09-16T22:03:45.154Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/I:H/AC:L/S:U/PR:L/C:H/A:H/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Privileges Description: IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118913 - https://exchange.xforce.ibmc
es: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172093
CVE ID: CVE-2019-4716 State: PUBLISHED Published: 2019-12-18T16:15:16.452Z Last Updated: 2025-10-21T23:35:55.984Z Severity: CRITICAL (CVSS 10 CVSS:3.0/UI:N/AC:L/PR:N/I:H/S:C/AV:N/C:H/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/1127781 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ment: References: - https://www.ibm.com/support/pages/node/1127781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172094 - http://seclists.org/fulldisclosure/2020/Mar/44 - http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html
CVE ID: CVE-2019-4718 State: PUBLISHED Published: 2020-03-23T14:30:14.733871Z Last Updated: 2024-09-17T02:57:40.905Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/A:N/AC:L/S:C/I:L/PR:L/UI:R/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/nod
Force ID: 172123. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6113470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172123
CVE ID: CVE-2019-4719 State: PUBLISHED Published: 2020-03-16T15:25:20.927352Z Last Updated: 2024-09-16T18:49:55.996Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/S:U/AV:L/PR:N/AC:H/A:N/UI:N/C:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1136608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172124
CVE ID: CVE-2019-4720 State: PUBLISHED Published: 2020-01-31T15:30:17.175888Z Last Updated: 2024-09-16T20:02:49.568Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/C:N/I:N/PR:N/A:H/AV:N/UI:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Denial of Service Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1285372 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1285372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172125
CVE ID: CVE-2019-4722 State: PUBLISHED Published: 2021-05-31T15:10:39.811632Z Last Updated: 2024-09-17T01:51:55.339Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/UI:N/PR:L/C:L/I:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172128 - https://security.netapp.com/advisory/ntap-2021
e/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172128 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2019-4723 State: PUBLISHED Published: 2021-05-31T15:10:40.553640Z Last Updated: 2024-09-17T01:46:36.206Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/PR:N/C:H/I:N/S:U/AC:L/A:N/UI:N/AV:P/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172129 - https://security.netapp.com/
/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172129 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2019-4724 State: PUBLISHED Published: 2021-05-31T15:10:41.229984Z Last Updated: 2024-09-17T00:16:18.553Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/A:N/AC:L/AV:P/UI:N/I:N/S:U/PR:N/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page. IBM X-Force ID: 172130. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172130 - https://security.netapp.com/advisory
/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172130 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2019-4725 State: PUBLISHED Published: 2020-10-06T15:45:15.852404Z Last Updated: 2024-09-17T02:11:53.549Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/C:L/S:C/I:L/A:N/PR:N/UI:R/E:H/RL:O/RC:C) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Cross-Site Scripting Description: IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 172131. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6342889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172131
CVE ID: CVE-2019-4726 State: PUBLISHED Published: 2020-02-26T15:55:24.691939Z Last Updated: 2024-09-16T20:26:43.136Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/S:U/AV:N/I:L/PR:N/C:N/A:N/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145833 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/172363
CVE ID: CVE-2019-4728 State: PUBLISHED Published: 2021-01-05T15:10:17.666364Z Last Updated: 2024-09-17T03:07:40.149Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/S:U/I:H/AV:N/PR:L/C:H/UI:N/A:H/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452. Additional Analyst Notes: