Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4427 State: PUBLISHED Published: 2020-02-12T16:10:17.298812Z Last Updated: 2024-09-16T17:39:13.204Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/UI:N/C:H/I:N/AV:N/PR:N/A:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud CLI Problem Types: Obtain Information Description: IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1356087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162773
CVE ID: CVE-2019-4428 State: PUBLISHED Published: 2019-12-09T22:30:23.849434Z Last Updated: 2024-09-17T01:30:50.479Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/UI:R/S:C/A:N/C:L/AC:L/PR:L/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Watson Assistant for IBM Cloud Pak for Data Problem Types: Cross-Site Scripting Description: IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162807. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 162807. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1125585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162807
CVE ID: CVE-2019-4429 State: PUBLISHED Published: 2020-02-19T15:15:44.172383Z Last Updated: 2024-09-17T02:36:20.669Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/PR:L/AC:L/C:L/S:C/UI:R/AV:N/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162886. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 162886. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1489053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162886
CVE ID: CVE-2019-4430 State: PUBLISHED Published: 2019-07-17T14:05:21.048749Z Last Updated: 2024-09-17T03:02:02.249Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/AC:L/A:N/I:N/AV:N/PR:L/S:U/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162887. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959173 - https://exchange.xforc
- CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162887
CVE ID: CVE-2019-4431 State: PUBLISHED Published: 2020-02-12T16:10:17.720612Z Last Updated: 2024-09-16T22:10:20.287Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/PR:L/I:L/C:L/AV:N/UI:R/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Cross-Site Scripting Description: IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 162888. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1942929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162888
CVE ID: CVE-2019-4433 State: PUBLISHED Published: 2019-08-20T18:25:26.864844Z Last Updated: 2024-09-16T22:46:10.782Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/C:H/A:L/UI:N/I:N/PR:L/S:U/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Identity Insight, InfoSphere Global Name Management Problem Types: Obtain Information Description: IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890. Additional Analyst Notes: - CVE Program Co
se sensitive information or consume memory resources. IBM X-Force ID: 162890. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10958081 - https://www.ibm.com/support/docview.wss?uid=ibm10958079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162890
CVE ID: CVE-2019-4437 State: PUBLISHED Published: 2019-08-20T19:30:25.622971Z Last Updated: 2024-09-16T22:36:05.265Z Severity: HIGH (CVSS 8.2 CVSS:3.0/PR:N/UI:N/I:N/A:L/S:U/AV:N/AC:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10960876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162947
CVE ID: CVE-2019-4439 State: PUBLISHED Published: 2019-07-25T14:30:21.204548Z Last Updated: 2024-09-16T17:43:10.762Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:L/AV:L/C:L/A:L/AC:L/S:U/PR:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Gain Privileges Description: IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162949
CVE ID: CVE-2019-4441 State: PUBLISHED Published: 2019-10-03T14:05:18.453321Z Last Updated: 2024-09-16T20:31:42.236Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/PR:N/AC:L/I:N/AV:N/C:L/S:U/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 163177. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/959023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163177
CVE ID: CVE-2019-4442 State: PUBLISHED Published: 2019-09-17T19:05:24.079821Z Last Updated: 2024-09-16T23:35:46.489Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/I:N/C:L/AV:N/S:U/AC:L/A:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content. IBM X-Force ID: 163226. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/959021 - https://exchange.xfo
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/959021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163226
CVE ID: CVE-2019-4444 State: PUBLISHED Published: 2019-12-16T15:45:15.836370Z Last Updated: 2024-09-17T02:57:47.004Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/I:N/A:N/PR:N/AV:L/UI:N/S:U/C:H/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1126833 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1126833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163453
CVE ID: CVE-2019-4446 State: PUBLISHED Published: 2020-04-17T13:25:25.783081Z Last Updated: 2024-09-16T17:38:35.193Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:N/AV:N/PR:L/A:N/I:L/S:U/C:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6190215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163490
CVE ID: CVE-2019-4447 State: PUBLISHED Published: 2019-08-26T14:40:14.912042Z Last Updated: 2024-09-16T19:50:39.451Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/AC:L/A:H/PR:N/UI:N/S:U/AV:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 High Performance Unload load for LUW Problem Types: Gain Privileges Description: IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary commands as root by altering the PATH variable to point to a user controlled location. When a crash is induced the trojan gdb command is executed. IBM X-F
ATH variable to point to a user controlled location. When a crash is induced the trojan gdb command is executed. IBM X-Force ID: 163488. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163488
CVE ID: CVE-2019-4448 State: PUBLISHED Published: 2019-08-26T14:40:14.962294Z Last Updated: 2024-09-17T00:27:01.106Z Severity: HIGH (CVSS 8.4 CVSS:3.0/UI:N/S:U/AV:L/C:H/AC:L/A:H/PR:N/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 High Performance Unload load for LUW Problem Types: Gain Privileges Description: IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum_debug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This results in arbitrary code being executed with root authority. IBM X-Force ID: 163489. Additio
a privileged context. This results in arbitrary code being executed with root authority. IBM X-Force ID: 163489. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163489
CVE ID: CVE-2019-4450 State: PUBLISHED Published: 2019-11-09T01:41:08.719784Z Last Updated: 2024-09-16T17:23:53.892Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/C:L/AC:L/AV:N/S:C/PR:N/UI:R/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: i Problem Types: Cross-Site Scripting Description: IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163492. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1100085 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1100085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163492
CVE ID: CVE-2019-4451 State: PUBLISHED Published: 2020-02-04T16:45:34.147203Z Last Updated: 2024-09-16T17:49:00.944Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/A:N/AC:L/AV:N/S:C/PR:L/UI:R/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: Security Identity Manager Problem Types: Cross-Site Scripting Description: IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163493. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1
ce ID: 163493. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163493
CVE ID: CVE-2019-4454 State: PUBLISHED Published: 2019-11-09T01:41:09.236634Z Last Updated: 2024-09-16T16:28:14.174Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/UI:R/A:N/C:L/S:C/AC:L/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: QRadar Problem Types: Cross-Site Scripting Description: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163618. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103499 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163618
CVE ID: CVE-2019-4456 State: PUBLISHED Published: 2019-07-30T13:25:14.949668Z Last Updated: 2024-09-16T17:08:42.483Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/UI:N/AV:N/C:H/S:U/AC:L/I:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Daeja ViewONE Problem Types: Obtain Information Description: IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959177 -
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163620
CVE ID: CVE-2019-4457 State: PUBLISHED Published: 2020-02-19T15:15:44.644466Z Last Updated: 2024-09-16T17:49:02.373Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/PR:L/AC:L/C:L/S:U/UI:N/AV:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2867997 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/2867997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163654
CVE ID: CVE-2019-4459 State: PUBLISHED Published: 2019-10-24T12:00:38.679967Z Last Updated: 2024-09-16T20:01:37.576Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:R/C:L/PR:L/S:C/A:N/I:L/AV:N/RL:O/RC:C/E:H) Vendors: IBM Products: Cloud Orchestrator Problem Types: Cross-Site Scripting Description: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163656. Additional Analyst Notes: - CVE Program Con
to credentials disclosure within a trusted session. IBM X-Force ID: 163656. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163656
CVE ID: CVE-2019-4460 State: PUBLISHED Published: 2019-08-20T18:25:26.918044Z Last Updated: 2024-09-17T02:15:52.552Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/C:L/AC:L/AV:N/S:U/PR:L/I:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 163681. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960848 - https://e
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163681
CVE ID: CVE-2019-4461 State: PUBLISHED Published: 2019-10-25T16:30:37.444055Z Last Updated: 2024-09-17T00:05:28.708Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/I:L/PR:L/S:C/C:L/A:N/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Orchestrator Problem Types: Gain Access Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain sensitive information. IBM X-Force ID: 163682. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 163682. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1072684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163682
CVE ID: CVE-2019-4465 State: PUBLISHED Published: 2019-12-03T14:55:23.910759Z Last Updated: 2024-09-17T00:37:02.674Z Severity: MEDIUM (CVSS 4 CVSS:3.0/C:L/UI:N/PR:N/A:N/S:U/AV:L/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak System Problem Types: Obtain Information Description: IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163774
CVE ID: CVE-2019-4467 State: PUBLISHED Published: 2019-12-03T14:55:24.341571Z Last Updated: 2024-09-17T04:08:42.225Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/C:L/UI:R/AV:N/AC:L/I:L/S:C/A:N/E:H/RC:C/RL:O) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163776. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 -
63776. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163776
CVE ID: CVE-2019-4468 State: PUBLISHED Published: 2019-12-03T14:55:24.759399Z Last Updated: 2024-09-17T02:20:50.249Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/I:L/AC:L/AV:N/UI:R/C:L/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163777. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 -
63777. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163777
CVE ID: CVE-2019-4470 State: PUBLISHED Published: 2019-11-09T01:41:09.707568Z Last Updated: 2024-09-17T01:15:31.029Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/A:N/AC:L/AV:N/S:C/I:L/PR:L/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: QRadar Problem Types: Cross-Site Scripting Description: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163779. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103517 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163779
CVE ID: CVE-2019-4471 State: PUBLISHED Published: 2021-05-31T15:10:38.437107Z Last Updated: 2024-09-17T02:11:48.142Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/C:H/I:N/S:U/AC:H/A:N/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS session. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 163780. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 -
3780. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163780 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2019-4473 State: PUBLISHED Published: 2019-08-05T13:40:15.625844Z Last Updated: 2024-09-16T17:28:54.997Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/AC:L/A:H/C:H/UI:N/PR:N/AV:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Java Problem Types: Gain Privileges Description: Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10960422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163984
CVE ID: CVE-2019-4477 State: PUBLISHED Published: 2019-09-17T19:05:24.132178Z Last Updated: 2024-09-17T04:00:10.528Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/S:U/AV:N/C:H/PR:L/I:N/UI:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/960290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163997