Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4077 State: PUBLISHED Published: 2019-04-25T14:36:43.622785Z Last Updated: 2024-09-16T20:06:16.632Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/S:C/PR:L/AV:N/A:N/C:L/I:L/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157111. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 157111. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157111
CVE ID: CVE-2019-4078 State: PUBLISHED Published: 2019-05-23T14:05:15.498574Z Last Updated: 2024-09-16T20:11:56.782Z Severity: HIGH (CVSS 7.4 CVSS:3.0/I:H/S:U/UI:N/C:H/A:H/AV:L/AC:H/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157190
CVE ID: CVE-2019-4080 State: PUBLISHED Published: 2019-04-02T13:20:34.027589Z Last Updated: 2024-09-16T16:18:50.696Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/C:N/UI:N/PR:L/AC:L/S:U/I:N/A:H/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Denial of Service Description: IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10875692 - https://exchange.x
tes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10875692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157380 - http://www.securityfocus.com/bid/107683
CVE ID: CVE-2019-4083 State: PUBLISHED Published: 2019-06-27T13:45:29.751790Z Last Updated: 2024-09-16T18:03:28.200Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/AV:N/C:L/S:C/I:L/A:N/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383. Additional Analyst Notes
potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157383
CVE ID: CVE-2019-4084 State: PUBLISHED Published: 2019-06-27T13:45:29.805463Z Last Updated: 2024-09-16T22:46:44.228Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/AV:N/PR:L/S:U/I:N/C:L/AC:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10
57384. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157384
CVE ID: CVE-2019-4086 State: PUBLISHED Published: 2019-09-17T19:05:23.642662Z Last Updated: 2024-09-17T01:56:47.663Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/A:N/AV:N/AC:L/S:C/PR:N/I:L/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Application Performance Management Problem Types: Gain Access Description: IBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 157509. Additional Analyst Notes: - CVE Program Cont
possibly launch further attacks against the victim. IBM X-Force ID: 157509. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-ibm-application-performance-management-could-allow-remote-attacker-hijack-clicking-action-victim-cve-2019-4086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157509
CVE ID: CVE-2019-4087 State: PUBLISHED Published: 2019-07-02T15:05:22.960766Z Last Updated: 2024-09-16T22:41:00.526Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/UI:N/PR:N/A:H/S:U/I:H/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Problem Types: Gain Privileges Description: IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storag
uld overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storage agent to crash. IBM X-Force ID: 157510. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10882472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157510
CVE ID: CVE-2019-4088 State: PUBLISHED Published: 2019-07-02T15:05:23.048494Z Last Updated: 2024-09-17T02:46:29.690Z Severity: HIGH (CVSS 7.4 CVSS:3.0/I:H/C:H/PR:N/A:H/S:U/AC:H/AV:L/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Gain Privileges Description: IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain root privileges on the vulnerable system. IBM X-Force ID: 157511. Additional Analyst Notes: - CVE Program Container: R
n root privileges on the vulnerable system. IBM X-Force ID: 157511. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10882472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157511
CVE ID: CVE-2019-4090 State: PUBLISHED Published: 2020-07-17T19:09:36 Last Updated: 2024-08-04T19:26:27.961Z Vendors: n/a Products: "HCL Campaign" Problem Types: "Cross-site scripting" Description: "HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080448
CVE ID: CVE-2019-4091 State: PUBLISHED Published: 2020-07-17T19:07:09 Last Updated: 2024-08-04T19:26:27.925Z Vendors: n/a Products: "HCL Marketing Platform" Problem Types: "Cross-site scripting" Description: "HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving an attacker ability to inject malicious code into the system. " Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080437
CVE ID: CVE-2019-4092 State: PUBLISHED Published: 2019-04-25T14:36:43.667793Z Last Updated: 2024-09-16T17:29:05.708Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:R/AC:L/AV:N/A:N/PR:L/S:C/C:N/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Gain Access Description: IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or
icious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 157654. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10874754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157654
CVE ID: CVE-2019-4093 State: PUBLISHED Published: 2019-04-02T13:20:34.098722Z Last Updated: 2024-09-16T18:38:37.509Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/PR:N/AC:L/S:U/C:L/UI:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875518 - https://exchange.xf
tes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157981
CVE ID: CVE-2019-4094 State: PUBLISHED Published: 2019-03-19T13:50:17.326534Z Last Updated: 2024-09-17T02:42:48.476Z Severity: HIGH (CVSS 8.4 CVSS:3.0/PR:N/A:H/S:U/I:H/AC:L/C:H/AV:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10875860 - https://e
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10875860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158014
CVE ID: CVE-2019-4095 State: PUBLISHED Published: 2019-12-10T16:10:23.248722Z Last Updated: 2024-09-16T22:01:49.342Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/S:U/AC:L/AV:N/I:L/PR:N/UI:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158015. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1126605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158015
CVE ID: CVE-2019-4098 State: PUBLISHED Published: 2019-12-03T14:55:22.497924Z Last Updated: 2024-09-17T04:29:21.484Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/AV:N/I:L/AC:L/C:L/UI:R/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158020. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118181 -
58020. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158020
CVE ID: CVE-2019-4101 State: PUBLISHED Published: 2019-07-01T15:05:37.630430Z Last Updated: 2024-09-16T18:13:44.028Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/I:N/AV:L/AC:L/C:N/PR:N/A:H/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?ui
ID: 158091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158091 - http://www.securityfocus.com/bid/109021
CVE ID: CVE-2019-4102 State: PUBLISHED Published: 2019-07-01T15:05:37.682948Z Last Updated: 2024-09-17T04:05:02.616Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/S:U/I:N/UI:N/C:H/PR:N/AC:H/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880743 - https://exchange.xforce.ibmcloud.c
am Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 - http://www.securityfocus.com/bid/109026
CVE ID: CVE-2019-4103 State: PUBLISHED Published: 2019-06-17T15:10:22.753611Z Last Updated: 2024-09-17T02:21:07.012Z Severity: HIGH (CVSS 8 CVSS:3.0/C:H/AV:A/S:U/AC:L/PR:L/UI:N/I:H/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: Tivoli Netcool/Impact Problem Types: Gain Access Description: IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution allow to execute arbitrary code on system which lead to take control over the system. IBM X-Force ID: 158094. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158094
CVE ID: CVE-2019-4106 State: PUBLISHED Published: 2019-09-30T15:20:29.277629Z Last Updated: 2024-09-17T04:20:33.971Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/S:C/PR:H/AC:L/I:L/C:L/A:N/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: WebSphere eXtreme Scale Problem Types: Cross-Site Scripting Description: IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158099. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 158099. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158099
CVE ID: CVE-2019-4109 State: PUBLISHED Published: 2019-09-30T15:20:29.709370Z Last Updated: 2024-09-16T18:08:59.888Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/AV:N/I:L/A:N/C:L/UI:R/PR:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere eXtreme Scale Problem Types: Gain Access Description: IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 158102. Additional Analyst Notes: - CVE Program Container: References: - h
r attacks against the victim. IBM X-Force ID: 158102. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158102
CVE ID: CVE-2019-4112 State: PUBLISHED Published: 2019-09-30T15:20:30.238596Z Last Updated: 2024-09-17T00:26:13.905Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:L/PR:N/UI:N/A:N/C:L/I:N/AV:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere eXtreme Scale Problem Types: Obtain Information Description: IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158105
CVE ID: CVE-2019-4115 State: PUBLISHED Published: 2019-09-30T15:20:30.669007Z Last Updated: 2024-09-16T16:13:45.004Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/S:C/PR:L/AC:L/C:L/A:N/UI:R/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: WebSphere eXtreme Scale Problem Types: Cross-Site Scripting Description: IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158113. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/no
-Force ID: 158113. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158113
CVE ID: CVE-2019-4116 State: PUBLISHED Published: 2019-07-25T14:30:20.949706Z Last Updated: 2024-09-16T18:09:25.131Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/I:N/AV:L/C:H/A:N/UI:N/PR:L/S:U/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158115
CVE ID: CVE-2019-4117 State: PUBLISHED Published: 2019-08-20T18:25:26.433293Z Last Updated: 2024-09-17T00:41:30.635Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/A:N/AC:L/S:U/AV:N/UI:R/PR:N/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Gain Access Description: IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158116. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10878396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158116
CVE ID: CVE-2019-4118 State: PUBLISHED Published: 2019-07-11T19:55:18.628672Z Last Updated: 2024-09-17T00:40:45.179Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/UI:N/AC:L/C:H/AV:L/I:N/PR:H/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Multicloud Manager Problem Types: Obtain Information Description: IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment. IBM X-Force ID: 158144. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158144 - http://www.securityfocus.com/bi
view.wss?uid=ibm10885290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158144 - http://www.securityfocus.com/bid/109147
CVE ID: CVE-2019-4119 State: PUBLISHED Published: 2019-05-17T15:20:16.726078Z Last Updated: 2024-09-16T18:44:04.593Z Severity: LOW (CVSS 3.1 CVSS:3.0/S:U/A:N/AC:H/I:L/C:N/AV:N/UI:N/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Other Description: IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10878460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158145
CVE ID: CVE-2019-4120 State: PUBLISHED Published: 2019-08-20T19:30:25.358276Z Last Updated: 2024-09-16T20:17:38.712Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/I:L/A:N/S:C/C:L/AC:L/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Cross-Site Scripting Description: IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158146. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885328
Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158146
CVE ID: CVE-2019-4129 State: PUBLISHED Published: 2019-07-02T15:05:23.098566Z Last Updated: 2024-09-16T22:20:14.365Z Severity: LOW (CVSS 3.1 CVSS:3.0/UI:N/AV:N/AC:H/C:L/I:N/A:N/S:U/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this vulnerability to potentially obtain details on the Operations Center architecture. IBM X-Force ID: 158279. Additional Analyst Notes: - CVE Program Container: References: - h
erations Center architecture. IBM X-Force ID: 158279. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158279
CVE ID: CVE-2019-4130 State: PUBLISHED Published: 2019-12-03T14:55:22.967955Z Last Updated: 2024-09-17T02:22:00.096Z Severity: CRITICAL (CVSS 9 CVSS:3.0/S:C/A:H/I:H/AC:L/AV:N/C:H/UI:R/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 158280. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158280