Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29719 State: PUBLISHED Published: 2021-12-03T17:00:27.135870Z Last Updated: 2024-09-16T22:30:03.680Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/AV:N/I:N/PR:N/A:N/AC:L/S:U/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type. IBM X-Force ID: 201091 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201091 - https://security.netapp.com/advisory/ntap-20211223-0006/
CVE ID: CVE-2021-29722 State: PUBLISHED Published: 2021-08-30T17:00:24.151907Z Last Updated: 2024-09-16T16:32:56.811Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/AV:N/UI:N/I:N/S:U/A:N/PR:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling Secure Proxy Problem Types: Obtain Information Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484681 - https://www.ibm.com/support/pages/node/6484685 - https://exchange.xforce.ibmcloud.c
ibm.com/support/pages/node/6484681 - https://www.ibm.com/support/pages/node/6484685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201095
CVE ID: CVE-2021-29723 State: PUBLISHED Published: 2021-08-30T17:00:25.900566Z Last Updated: 2024-09-16T20:57:51.336Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/AV:N/UI:N/I:N/S:U/A:N/PR:N/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling Secure Proxy Problem Types: Obtain Information Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484681 - https://www.ibm.com/support/pages/node/6484685 - https://exchange.xforce.ibmcloud.co
bm.com/support/pages/node/6484681 - https://www.ibm.com/support/pages/node/6484685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201100
CVE ID: CVE-2021-29725 State: PUBLISHED Published: 2021-07-15T16:00:17.880583Z Last Updated: 2024-09-16T19:25:58.209Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/UI:N/PR:N/AV:N/S:U/I:N/C:N/A:H/RL:O/RC:C/E:U) Vendors: IBM Products: Secure External Authentication Server, Secure Proxy Problem Types: Denial of Service Description: IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471577 - https://www.ibm.com/support/pages/node/6471615 - https:/
References: - https://www.ibm.com/support/pages/node/6471577 - https://www.ibm.com/support/pages/node/6471615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201102
CVE ID: CVE-2021-29726 State: PUBLISHED Published: 2022-05-17T16:25:20.415100Z Last Updated: 2024-09-16T16:53:41.236Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AC:L/UI:N/PR:N/A:N/AV:N/C:N/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Secure External Authentication Server, Sterling Secure Proxy Problem Types: Bypass Security Description: IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with the host due to improper validation of certificates. IBM X-Force ID: 201104. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586754 - https://www.ibm.com/
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586754 - https://www.ibm.com/support/pages/node/6586756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201104
CVE ID: CVE-2021-29727 State: PUBLISHED Published: 2021-08-26T19:25:24.374464Z Last Updated: 2024-09-17T01:56:39.040Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/C:N/AC:L/AV:L/UI:N/A:H/PR:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 201106. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6483875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201106
CVE ID: CVE-2021-29728 State: PUBLISHED Published: 2021-08-30T17:00:27.523169Z Last Updated: 2024-09-16T16:53:36.442Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/S:U/I:N/C:H/PR:H/A:N/AV:N/AC:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling Secure Proxy Problem Types: Obtain Information Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484681 - h
160. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484681 - https://www.ibm.com/support/pages/node/6484685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201160
CVE ID: CVE-2021-29730 State: PUBLISHED Published: 2021-07-09T16:55:13.696416Z Last Updated: 2024-09-16T21:04:38.549Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/AC:L/S:U/A:L/C:L/AV:N/I:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Data Manipulation Description: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468569 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201164
CVE ID: CVE-2021-29735 State: PUBLISHED Published: 2021-11-08T16:50:30.699791Z Last Updated: 2024-09-16T20:52:03.637Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/PR:H/UI:R/AC:L/S:C/A:N/C:L/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6514007
session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6514007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201239
CVE ID: CVE-2021-29736 State: PUBLISHED Published: 2021-07-30T11:15:13.318471Z Last Updated: 2024-09-16T20:03:22.236Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/S:U/C:L/AC:H/UI:N/I:L/A:L/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. IBM X-Force ID: 201300. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201300
CVE ID: CVE-2021-29737 State: PUBLISHED Published: 2021-11-02T16:00:25.858337Z Last Updated: 2024-09-16T20:13:16.716Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/AV:N/I:N/PR:N/UI:N/C:H/A:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate. IBM X-Force ID: 201301. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201301
CVE ID: CVE-2021-29738 State: PUBLISHED Published: 2021-11-02T16:00:27.408651Z Last Updated: 2024-09-16T20:11:16.573Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/I:L/A:N/AC:L/C:L/UI:R/S:C/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201302. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
attacks. IBM X-Force ID: 201302. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201302
CVE ID: CVE-2021-29739 State: PUBLISHED Published: 2021-08-10T13:15:11.373864Z Last Updated: 2024-09-16T17:14:10.523Z Severity: LOW (CVSS 2.7 CVSS:3.0/C:L/I:N/PR:H/S:U/AC:L/A:N/AV:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198846
CVE ID: CVE-2021-29740 State: PUBLISHED Published: 2021-06-01T14:05:10.819504Z Last Updated: 2024-09-16T20:11:22.875Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/S:U/AC:L/A:H/PR:N/C:H/AV:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Privileges Description: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access. IBM X-Force ID: 201474. Additional Analyst Notes: - CVE Program Container: References: -
ntire system with root access. IBM X-Force ID: 201474. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201474
CVE ID: CVE-2021-29741 State: PUBLISHED Published: 2021-08-02T15:00:12.898731Z Last Updated: 2024-09-16T20:46:34.253Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/S:U/AC:L/UI:N/I:H/PR:N/A:H/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: VIOS, AIX Problem Types: Gain Privileges Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force ID: 201478. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6477018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201478
CVE ID: CVE-2021-29742 State: PUBLISHED Published: 2021-07-15T17:16:08.165831Z Last Updated: 2024-09-16T23:42:12.638Z Severity: HIGH (CVSS 7.9 CVSS:3.0/PR:N/UI:R/C:H/S:C/I:H/AV:A/A:H/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Gain Access Description: IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201483
CVE ID: CVE-2021-29743 State: PUBLISHED Published: 2021-08-30T17:00:29.143591Z Last Updated: 2024-09-17T03:08:27.336Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/I:L/S:C/A:N/PR:L/C:L/AC:L/AV:N/UI:N/RL:O/RC:C/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 201693. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 201693. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201693
CVE ID: CVE-2021-29744 State: PUBLISHED Published: 2021-08-27T15:20:11.117113Z Last Updated: 2024-09-16T22:30:22.663Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/AC:L/S:C/C:L/AV:N/I:L/PR:L/RC:C/RL:O/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 201694. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages
M X-Force ID: 201694. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6484391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201694
CVE ID: CVE-2021-29745 State: PUBLISHED Published: 2021-10-15T15:55:20.522534Z Last Updated: 2024-09-16T16:58:01.641Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AV:N/S:U/A:N/UI:N/I:L/C:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201695 - https://security.netapp.com/advi
port/pages/node/6491661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201695 - https://security.netapp.com/advisory/ntap-20211112-0005/
CVE ID: CVE-2021-29747 State: PUBLISHED Published: 2021-05-17T17:10:16.033842Z Last Updated: 2024-09-17T00:01:49.567Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/UI:N/S:U/AC:H/PR:N/I:N/C:H/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a vulnerability in the authentication mechanism. IBM X-Force ID: 201775. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201775
CVE ID: CVE-2021-29749 State: PUBLISHED Published: 2021-07-15T16:00:19.457703Z Last Updated: 2024-09-17T03:38:25.613Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/AV:N/PR:N/UI:N/AC:L/A:N/C:L/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Secure Proxy, Secure External Authentication Server Problem Types: Gain Access Description: IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201777. Additional Analyst Notes: - CVE Program Container: References: - h
r facilitating other attacks. IBM X-Force ID: 201777. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471621 - https://www.ibm.com/support/pages/node/6471623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201777
CVE ID: CVE-2021-29750 State: PUBLISHED Published: 2021-09-15T17:55:17.236708Z Last Updated: 2024-09-16T18:34:16.270Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/A:N/UI:N/AV:N/C:H/AC:H/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201778
CVE ID: CVE-2021-29751 State: PUBLISHED Published: 2021-06-28T15:55:25.283945Z Last Updated: 2024-09-17T02:47:11.003Z Severity: LOW (CVSS 3.1 CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Business Process Manager, Business Automation Workflow, Cloud Pak for Automation Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/64
e ID: 201779. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465127 - https://www.ibm.com/support/pages/node/6467055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
CVE ID: CVE-2021-29752 State: PUBLISHED Published: 2021-09-16T15:50:17.099889Z Last Updated: 2024-09-17T03:12:34.660Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AC:H/C:H/AV:N/S:U/UI:N/PR:H/A:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201780 - https://security.netapp.com/advisory/
pages/node/6489489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201780 - https://security.netapp.com/advisory/ntap-20220526-0003/
CVE ID: CVE-2021-29753 State: PUBLISHED Published: 2021-11-05T17:15:11.376879Z Last Updated: 2024-09-17T02:42:34.108Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/C:H/S:U/AV:N/UI:N/A:N/AC:H/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6513703 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6513703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201919
CVE ID: CVE-2021-29754 State: PUBLISHED Published: 2021-06-11T14:25:19.478134Z Last Updated: 2024-09-16T22:14:35.021Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/S:U/AC:H/AV:N/C:L/UI:N/PR:L/I:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6462627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202006
CVE ID: CVE-2021-29755 State: PUBLISHED Published: 2022-07-20T17:35:14.648863Z Last Updated: 2024-09-17T04:00:17.019Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/AV:N/I:N/C:H/S:U/PR:N/A:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6605431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202015
CVE ID: CVE-2021-29756 State: PUBLISHED Published: 2021-12-03T17:00:28.506976Z Last Updated: 2024-09-16T19:47:16.734Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/I:L/AV:N/A:N/PR:N/S:U/AC:L/UI:R/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vuln
gram Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202167 - https://security.netapp.com/advisory/ntap-20211223-0006/
CVE ID: CVE-2021-29757 State: PUBLISHED Published: 2021-08-02T16:00:13.415227Z Last Updated: 2024-09-16T23:56:48.490Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/S:U/I:L/PR:N/AV:N/UI:R/AC:L/C:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar User Behavior Analytics Problem Types: Gain Access Description: IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6477204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6477204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202168
CVE ID: CVE-2021-29758 State: PUBLISHED Published: 2021-10-06T17:10:31.485872Z Last Updated: 2024-09-16T19:56:42.709Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/AC:L/S:U/I:L/AV:N/UI:N/PR:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202169
CVE ID: CVE-2021-29759 State: PUBLISHED Published: 2021-07-07T16:30:36.764538Z Last Updated: 2024-09-16T16:48:47.088Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:H/I:N/UI:N/AV:L/PR:H/A:N/AC:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: Obtain Information Description: IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from internal log files. IBM X-Force ID: 202212. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202212