Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1644 State: PUBLISHED Published: 2018-08-27T15:00:00Z Last Updated: 2024-09-16T17:49:28.929Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Commerce Problem Types: Obtain Information Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 - 8.0.3.6, 8.0.4.0 - 8.0.4.14, and 7.0.0.0 Feature Pack 8 could allow an authenticated user to obtain sensitive information about another user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10728829 - https://exch
lyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10728829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144589
CVE ID: CVE-2018-1647 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-16T20:06:14.207Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar Incident Forensics Problem Types: Denial of Service Description: IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID: 144650. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144650 - https://www.ibm.com/support/docview.wss?uid=ibm10729705
CVE ID: CVE-2018-1648 State: PUBLISHED Published: 2018-12-05T17:00:00 Last Updated: 2024-08-05T04:07:43.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144653. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144653 - http://www.ibm.com/support/docview.wss?uid=ibm10737027
CVE ID: CVE-2018-1649 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-16T22:30:58.955Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar Incident Forensics Problem Types: Obtain Information Description: IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144655. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729703 - https://exchange.xf
es: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144655
CVE ID: CVE-2018-1650 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-16T20:52:37.894Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass the authentication configured by the administrator. IBM X-Force ID: 144656. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10737025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144656
CVE ID: CVE-2018-1652 State: PUBLISHED Published: 2018-12-11T16:00:00Z Last Updated: 2024-09-16T17:54:00.095Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/AC:L/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways, MQ Appliance Problem Types: Denial of Service Description: IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724. Additional Analyst Notes: - CVE Program Container:
a denial of service through unknown vectors. IBM X-Force ID: 144724. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144724 - https://www.ibm.com/support/docview.wss?uid=ibm10717483 - https://www.ibm.com/support/docview.wss?uid=ibm10744557
CVE ID: CVE-2018-1653 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T01:21:32.639Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Cross-Site Scripting Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144726. Additional Analyst Notes: - CVE Program Container: Ref
ials disclosure within a trusted session. IBM X-Force ID: 144726. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144726 - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - http://www.securityfocus.com/bid/106272
CVE ID: CVE-2018-1654 State: PUBLISHED Published: 2018-12-11T16:00:00Z Last Updated: 2024-09-16T21:57:16.048Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Curam Social Program Management Problem Types: Gain Access Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacke
e URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 144747. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144747 - http://www.securityfocus.com/bid/106187 - https://www.ibm.com/support/docview.wss?uid=ibm10739027
CVE ID: CVE-2018-1655 State: PUBLISHED Published: 2018-06-22T14:00:00Z Last Updated: 2024-09-17T01:31:27.508Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: AIX Problem Types: Obtain Information Description: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041166 - http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/144748 - http://www.securityfocus.com/bid/104542
CVE ID: CVE-2018-1656 State: PUBLISHED Published: 2018-08-20T21:00:00Z Last Updated: 2024-09-16T18:09:14.892Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: SDK, Java Technology Edition Problem Types: File Manipulation Description: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10719653 - https://exchange.xforce.ibmcloud.com/vul
ntainer: References: - http://www.ibm.com/support/docview.wss?uid=ibm10719653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144882 - https://access.redhat.com/errata/RHSA-2018:2713 - http://www.securityfocus.com/bid/105118 - https://access.redhat.com/errata/RHSA-2018:2575 - https://access.redhat.com/errata/RHSA-2018:2576 - https://access.redhat.com/errata/RHSA-2018:2568 - https://access.redhat.com/errata/RHSA-2018:2569 - https://access.redhat.com/errata/RHSA-2018:2712 - http://www.securitytracker.com/id/1041765 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2018-1657 State: PUBLISHED Published: 2019-01-04T15:00:00Z Last Updated: 2024-09-17T00:52:19.827Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Cross-Site Scripting Description: IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144883. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
-force ID: 144883. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144883 - http://www.securityfocus.com/bid/106460 - https://www.ibm.com/support/docview.wss?uid=ibm10792081
CVE ID: CVE-2018-1658 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T16:14:06.764Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Gain Access Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable s
lity to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 144884. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144884 - http://www.ibm.com/support/docview.wss?uid=ibm10875340 - http://www.securityfocus.com/bid/107435
CVE ID: CVE-2018-1659 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T23:45:40.107Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144885. Additional Analyst Notes: - CVE Program Container: Re
tials disclosure within a trusted session. IBM X-Force ID: 144885. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144885
CVE ID: CVE-2018-1660 State: PUBLISHED Published: 2018-09-27T19:00:00Z Last Updated: 2024-09-17T02:57:09.406Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144886. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105446 - http:/
44886. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105446 - http://www.securitytracker.com/id/1041755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144886 - https://www.ibm.com/support/docview.wss?uid=ibm10715923
CVE ID: CVE-2018-1661 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T23:51:14.454Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways Problem Types: Gain Access Description: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144887. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144887 - https://www.ibm.com/support/docview.wss?uid=ibm1074
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144887 - https://www.ibm.com/support/docview.wss?uid=ibm10744189 - http://www.securityfocus.com/bid/106329
CVE ID: CVE-2018-1663 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-17T01:41:02.926Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways Problem Types: Obtain Information Description: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.x
techniques. IBM X-Force ID: 144889. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144889 - http://www.securityfocus.com/bid/106199 - https://www.ibm.com/support/docview.wss?uid=ibm10740033
CVE ID: CVE-2018-1664 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-17T03:07:40.633Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway CD, DataPower Gateways Problem Types: Obtain Information Description: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890. Additional Analyst Notes: - CVE Program Container: References: - htt
edentials in browser cache. IBM X-Force ID: 144890. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144890 - https://www.ibm.com/support/docview.wss?uid=ibm10730509
CVE ID: CVE-2018-1665 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T03:02:59.967Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway Problem Types: Obtain Information Description: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10744
91. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10744195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144891
CVE ID: CVE-2018-1666 State: PUBLISHED Published: 2019-02-07T16:00:00Z Last Updated: 2024-09-16T23:16:42.883Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway Problem Types: Other Description: IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10744205 - https://exchange.
otes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10744205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144892
CVE ID: CVE-2018-1667 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T17:03:41.932Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways Problem Types: Cross-Site Scripting Description: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144893. A
intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144893. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10744209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144893
CVE ID: CVE-2018-1668 State: PUBLISHED Published: 2019-01-29T16:00:00Z Last Updated: 2024-09-17T03:23:57.104Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway Problem Types: Obtain Information Description: IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144894 - https://www.ibm.com/support/
gram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144894 - https://www.ibm.com/support/docview.wss?uid=ibm10794735
CVE ID: CVE-2018-1669 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T22:21:18.055Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways, DataPower Gateway CD Problem Types: Obtain Information Description: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resour
ng XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 144950. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10730489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144950
CVE ID: CVE-2018-1670 State: PUBLISHED Published: 2018-10-04T15:00:00Z Last Updated: 2024-09-17T01:06:09.597Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144946 - http://www.ibm.com/support/docview.wss?uid=ibm10731547 - http://www.ibm.com
xforce.ibmcloud.com/vulnerabilities/144946 - http://www.ibm.com/support/docview.wss?uid=ibm10731547 - http://www.ibm.com/support/docview.wss?uid=ibm10731549
CVE ID: CVE-2018-1671 State: PUBLISHED Published: 2018-12-10T14:00:00 Last Updated: 2024-08-05T04:07:44.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10739019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144951 - http://www.securityfocus.com/bid/106202
CVE ID: CVE-2018-1672 State: PUBLISHED Published: 2018-10-01T15:00:00Z Last Updated: 2024-09-17T01:55:59.755Z Severity: MEDIUM (CVSS 5 CVSS:3.0/A:L/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Gain Privileges Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144958 - http://www.securitytracker.com/id/1041766 - https://www.ibm.com/support/docview.
e.ibmcloud.com/vulnerabilities/144958 - http://www.securitytracker.com/id/1041766 - https://www.ibm.com/support/docview.wss?uid=ibm10716981
CVE ID: CVE-2018-1673 State: PUBLISHED Published: 2018-10-12T05:00:00Z Last Updated: 2024-09-17T02:27:06.592Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145108. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm1
45108. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145108 - http://www.securitytracker.com/id/1041845
CVE ID: CVE-2018-1674 State: PUBLISHED Published: 2018-09-20T15:00:00Z Last Updated: 2024-09-16T16:13:57.590Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Business Process Manager Problem Types: Data Manipulation Description: IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041717 - https
5109. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145109 - https://www.ibm.com/support/docview.wss?uid=ibm10720035