Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4776 State: PUBLISHED Published: 2020-10-12T13:05:37.983125Z Last Updated: 2024-09-16T23:00:33.240Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/A:N/PR:N/S:U/UI:N/C:L/I:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Curam SPM Problem Types: Obtain Information Description: A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted file path in URL request to view arbitrary files on the system. IBM X-Force ID: 189154. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346573 -
9154. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189154
CVE ID: CVE-2020-4778 State: PUBLISHED Published: 2020-10-12T13:05:38.522339Z Last Updated: 2024-09-17T03:54:20.072Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AC:H/UI:N/S:U/C:H/PR:N/AV:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Curam SPM Problem Types: Obtain Information Description: IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the CÃºram application. IBM X-Force ID: 189156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189156
CVE ID: CVE-2020-4779 State: PUBLISHED Published: 2020-10-12T13:05:38.969844Z Last Updated: 2024-09-16T20:12:01.163Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/A:N/PR:L/S:U/UI:N/C:H/I:H/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Curam SPM Problem Types: Bypass Security Description: A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189157
CVE ID: CVE-2020-4780 State: PUBLISHED Published: 2020-10-12T13:05:39.409351Z Last Updated: 2024-09-17T00:11:25.417Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:N/AV:N/A:N/I:N/AC:L/S:U/UI:R/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Curam SPM Problem Types: Obtain Information Description: OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346581 - https://exchange.xforce.ibmclou
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189158
CVE ID: CVE-2020-4781 State: PUBLISHED Published: 2020-10-12T13:05:39.850417Z Last Updated: 2024-09-17T03:37:25.301Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/AV:N/PR:L/C:N/UI:N/S:U/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Curam SPM Problem Types: Denial of Service Description: An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189159
CVE ID: CVE-2020-4782 State: PUBLISHED Published: 2020-10-28T16:15:19.877256Z Last Updated: 2024-09-16T18:43:28.591Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/C:H/AV:N/AC:L/UI:N/A:N/PR:L/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356083 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189213
CVE ID: CVE-2020-4783 State: PUBLISHED Published: 2020-11-23T16:55:20.269859Z Last Updated: 2024-09-16T21:57:23.152Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/A:N/C:H/UI:N/PR:N/I:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189214. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
techniques. IBM X-Force ID: 189214. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6368601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189214
CVE ID: CVE-2020-4785 State: PUBLISHED Published: 2020-11-03T13:25:21.789171Z Last Updated: 2024-09-16T17:29:01.679Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/AV:N/I:L/A:N/UI:R/AC:L/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: Gain Access Description: IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 189219. Addition
jack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 189219. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6357899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189219
CVE ID: CVE-2020-4786 State: PUBLISHED Published: 2021-01-27T16:35:32.209985Z Last Updated: 2024-09-16T23:00:30.519Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/A:N/C:L/S:U/PR:L/AC:L/UI:N/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
ttacks. IBM X-Force ID: 189221. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189221
CVE ID: CVE-2020-4787 State: PUBLISHED Published: 2021-01-27T16:35:32.845392Z Last Updated: 2024-09-16T18:29:15.761Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/I:L/PR:H/AC:L/UI:N/C:L/S:U/AV:L/A:L/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
ttacks. IBM X-Force ID: 189224. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189224
CVE ID: CVE-2020-4788 State: PUBLISHED Published: 2020-11-20T03:45:13.599036Z Last Updated: 2024-09-16T19:05:08.453Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/PR:N/C:H/AV:L/AC:H/S:U/A:N/I:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: VIOS, AIX Problem Types: Obtain Information Description: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189296 - http://www.openwall.com/lists/oss-security/20
de/6370729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189296 - http://www.openwall.com/lists/oss-security/2020/11/20/3 - http://www.openwall.com/lists/oss-security/2020/11/23/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/ - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2020-4789 State: PUBLISHED Published: 2021-01-27T16:35:33.500204Z Last Updated: 2024-09-16T18:43:31.448Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:N/UI:N/PR:L/AC:L/S:U/C:H/A:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 189302. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189302
CVE ID: CVE-2020-4790 State: PUBLISHED Published: 2021-02-09T14:50:21.747856Z Last Updated: 2024-09-16T23:45:44.117Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/AV:A/UI:N/A:H/S:U/I:N/PR:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Denial of Service Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL, rendering the application unusuable. IBM X-Force ID: 189375. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1893
References: - https://www.ibm.com/support/pages/node/6413391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189375
CVE ID: CVE-2020-4791 State: PUBLISHED Published: 2021-02-09T14:50:22.418018Z Last Updated: 2024-09-16T19:09:48.594Z Severity: MEDIUM (CVSS 6.9 CVSS:3.0/C:H/PR:N/I:L/S:C/A:N/UI:N/AV:A/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1893
References: - https://www.ibm.com/support/pages/node/6403265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189379
CVE ID: CVE-2020-4792 State: PUBLISHED Published: 2021-04-05T16:20:16.525752Z Last Updated: 2024-09-17T03:38:27.780Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AV:N/AC:L/S:C/PR:L/C:L/UI:R/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Edge Problem Types: Cross-Site Scripting Description: IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189441. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6439819 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/6439819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189441
CVE ID: CVE-2020-4794 State: PUBLISHED Published: 2020-12-21T17:50:30.680303Z Last Updated: 2024-09-16T18:43:25.778Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:L/I:N/C:L/AC:L/PR:L/S:U/AV:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Automation Workstream Services, Business Process Manager, Business Automation Workflow Problem Types: Denial of Service Description: IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445. Additional Analyst Notes: - CV
uase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6359463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189445
CVE ID: CVE-2020-4795 State: PUBLISHED Published: 2021-02-09T14:50:23.023302Z Last Updated: 2024-09-16T21:07:44.691Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/C:L/PR:N/I:N/AV:N/AC:L/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request. IBM X-Force ID: 189446. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189446
CVE ID: CVE-2020-4799 State: PUBLISHED Published: 2020-10-08T13:20:17.028481Z Last Updated: 2024-09-16T23:30:22.798Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AC:L/A:H/UI:N/C:H/I:H/PR:L/AV:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Informix Dynamic Server Problem Types: Gain Privileges Description: IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6343587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189460
CVE ID: CVE-2020-4803 State: PUBLISHED Published: 2021-09-23T16:05:25.785792Z Last Updated: 2024-09-17T04:29:01.441Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/S:U/I:N/PR:N/AC:L/C:L/A:N/AV:L/RC:C/RL:O/E:U) Vendors: IBM Products: Edge Problem Types: Obtain Information Description: IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189535
CVE ID: CVE-2020-4805 State: PUBLISHED Published: 2021-09-23T16:05:27.376409Z Last Updated: 2024-09-17T03:07:41.582Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/C:L/AV:L/AC:L/PR:N/I:N/UI:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Edge Problem Types: Obtain Information Description: IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189539
CVE ID: CVE-2020-4809 State: PUBLISHED Published: 2021-09-23T16:05:28.999053Z Last Updated: 2024-09-16T20:58:09.386Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/S:U/I:N/A:N/C:L/AV:L/PR:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Edge Problem Types: Obtain Information Description: IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189633
CVE ID: CVE-2020-4811 State: PUBLISHED Published: 2021-05-14T16:15:33.861116Z Last Updated: 2024-09-17T03:44:06.993Z Severity: LOW (CVSS 2.4 CVSS:3.0/AV:N/A:N/C:N/S:U/PR:H/UI:R/I:L/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Security Problem Types: Data Manipulation Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189635
CVE ID: CVE-2020-4815 State: PUBLISHED Published: 2021-01-27T13:05:26.062034Z Last Updated: 2024-09-16T17:14:22.948Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:L/AV:N/I:N/AC:L/UI:N/A:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189639
CVE ID: CVE-2020-4816 State: PUBLISHED Published: 2021-01-27T13:05:26.688798Z Last Updated: 2024-09-16T20:48:18.028Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/C:H/PR:N/I:N/AC:H/UI:R/S:U/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189703. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
niques. IBM X-Force ID: 189703. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189703
CVE ID: CVE-2020-4820 State: PUBLISHED Published: 2021-01-27T13:05:27.317209Z Last Updated: 2024-09-16T20:27:23.244Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/UI:R/A:N/S:C/PR:N/AV:N/C:L/I:L/RL:O/RC:C/E:H) Vendors: IBM Products: Cloud Pak for Security Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408664 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189783
CVE ID: CVE-2020-4821 State: PUBLISHED Published: 2021-07-16T16:50:24.014931Z Last Updated: 2024-09-17T00:11:05.468Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/A:N/C:H/S:U/AV:N/PR:N/UI:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Change Data Capture for z/OS, InfoSphere Data Replication Problem Types: Bypass Security Description: IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6472911 - https://www.i
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6472911 - https://www.ibm.com/support/pages/node/6472909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189834
CVE ID: CVE-2020-4825 State: PUBLISHED Published: 2021-02-04T16:55:37.759815Z Last Updated: 2024-09-17T00:16:01.521Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:R/PR:L/A:N/I:L/S:C/AV:N/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189839. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 189839. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189839
CVE ID: CVE-2020-4826 State: PUBLISHED Published: 2021-02-04T16:55:38.478758Z Last Updated: 2024-09-16T16:28:05.688Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/AV:N/S:U/A:N/I:L/UI:R/AC:L/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189840. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410912 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6410912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189840
CVE ID: CVE-2020-4827 State: PUBLISHED Published: 2021-02-04T16:55:39.106476Z Last Updated: 2024-09-17T00:25:58.817Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/I:L/S:U/UI:R/AC:L/PR:N/AV:N/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410500 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6410500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189841
CVE ID: CVE-2020-4828 State: PUBLISHED Published: 2021-02-04T16:55:39.721532Z Last Updated: 2024-09-16T18:33:16.092Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/C:L/PR:N/UI:N/AC:L/I:L/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 189842. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189842