Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191273
CVE ID: CVE-2020-4910 State: PUBLISHED Published: 2021-01-04T14:00:34.122091Z Last Updated: 2024-09-17T03:23:43.354Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/S:C/C:L/AC:L/UI:R/PR:H/I:L/AV:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191274
CVE ID: CVE-2020-4912 State: PUBLISHED Published: 2021-01-04T14:00:34.812100Z Last Updated: 2024-09-16T17:19:03.854Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/A:L/AV:N/I:L/PR:H/UI:N/AC:L/S:U/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Privileges Description: IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user. IBM X-Force ID: 191287. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191287
CVE ID: CVE-2020-4913 State: PUBLISHED Published: 2021-01-04T14:00:35.556956Z Last Updated: 2024-09-16T23:01:15.932Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:H/S:U/AC:L/UI:N/I:N/PR:H/AV:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Obtain Information Description: IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191288
CVE ID: CVE-2020-4914 State: PUBLISHED Published: 2023-05-05T18:17:10.598Z Last Updated: 2025-01-29T16:19:50.434Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Cloud Pak System Software Suite Problem Types: CWE-613 Description: IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6967181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191290
CVE ID: CVE-2020-4916 State: PUBLISHED Published: 2021-01-04T14:00:36.207464Z Last Updated: 2024-09-16T16:33:15.125Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/A:N/S:C/C:L/PR:H/I:L/UI:N/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191390
CVE ID: CVE-2020-4917 State: PUBLISHED Published: 2021-01-04T14:00:36.896166Z Last Updated: 2024-09-16T20:41:54.128Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/A:N/C:N/S:U/AC:L/UI:R/I:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191391. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191391
CVE ID: CVE-2020-4918 State: PUBLISHED Published: 2021-01-04T14:00:37.535272Z Last Updated: 2024-09-17T04:08:48.514Z Severity: LOW (CVSS 2.3 CVSS:3.0/A:N/AV:L/AC:L/UI:N/PR:H/I:N/C:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak System Problem Types: Obtain Information Description: IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191392
CVE ID: CVE-2020-4919 State: PUBLISHED Published: 2021-01-04T14:00:38.182005Z Last Updated: 2024-09-17T02:17:11.503Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/C:L/S:U/UI:N/AC:L/PR:H/I:L/AV:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191395
CVE ID: CVE-2020-4920 State: PUBLISHED Published: 2021-04-12T18:00:23.065458Z Last Updated: 2024-09-16T18:49:15.057Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/C:L/I:L/PR:L/S:C/AC:L/AV:N/UI:N/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Team Concert, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Engineering Test Management, Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary
Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191396
CVE ID: CVE-2020-4921 State: PUBLISHED Published: 2021-01-20T15:00:28.538560Z Last Updated: 2024-09-17T04:14:39.016Z Severity: HIGH (CVSS 7.6 CVSS:3.0/S:U/A:L/PR:L/AC:L/AV:N/UI:N/C:H/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Data Manipulation Description: IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191398. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6405952 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6405952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191398
CVE ID: CVE-2020-4925 State: PUBLISHED Published: 2022-03-01T16:45:22.527592Z Last Updated: 2024-09-16T17:14:46.556Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/C:N/PR:N/AC:L/S:U/A:H/AV:L/UI:N/RC:C/RL:O/E:H) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6560094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191599
CVE ID: CVE-2020-4926 State: PUBLISHED Published: 2022-05-24T16:20:16.554701Z Last Updated: 2024-09-16T16:17:59.228Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/PR:N/I:L/AC:H/S:U/C:H/A:N/UI:N/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Scale, Elastic Storage System Problem Types: Obtain Information Description: A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6589109 - https://www.ibm.com/support/pages/node/6565399 - h
ainer: References: - https://www.ibm.com/support/pages/node/6589109 - https://www.ibm.com/support/pages/node/6565399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191600
CVE ID: CVE-2020-4927 State: PUBLISHED Published: 2023-03-15T18:11:14.873Z Last Updated: 2025-02-26T20:20:18.170Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Spectrum Scale Problem Types: CWE-200 Description: A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6960571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191695
CVE ID: CVE-2020-4928 State: PUBLISHED Published: 2021-01-04T14:00:38.935092Z Last Updated: 2024-09-17T03:29:07.546Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/A:H/AV:L/UI:N/AC:L/PR:H/I:H/S:U/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the server. IBM X-Force ID: 191705. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6393554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191705
CVE ID: CVE-2020-4929 State: PUBLISHED Published: 2021-05-05T15:45:31.256614Z Last Updated: 2024-09-16T16:23:26.840Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/I:L/AV:N/C:L/PR:L/UI:R/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191706. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449674 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191706
CVE ID: CVE-2020-4931 State: PUBLISHED Published: 2021-02-24T17:20:13.887915Z Last Updated: 2024-09-17T03:07:35.365Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/S:U/UI:N/A:H/C:N/PR:L/I:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191747
CVE ID: CVE-2020-4932 State: PUBLISHED Published: 2021-05-05T15:45:31.920209Z Last Updated: 2024-09-16T17:23:29.316Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/PR:N/AV:L/UI:N/AC:L/A:N/I:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 191748. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449682 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6449682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191748
CVE ID: CVE-2020-4933 State: PUBLISHED Published: 2021-02-18T15:10:44.071639Z Last Updated: 2024-09-16T18:34:38.140Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AV:N/AC:L/PR:L/I:L/UI:R/C:L/S:C/E:H/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191751. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/s
session. IBM X-Force ID: 191751. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191751
CVE ID: CVE-2020-4934 State: PUBLISHED Published: 2021-02-02T14:35:13.498344Z Last Updated: 2024-09-16T19:14:54.390Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/C:L/PR:L/I:N/S:U/AC:L/AV:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 191752. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410504 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/6410504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191752
CVE ID: CVE-2020-4935 State: PUBLISHED Published: 2021-07-01T15:40:14.218405Z Last Updated: 2024-09-16T22:02:29.294Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/AC:L/A:N/I:L/UI:R/C:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Datacap Navigator Problem Types: Cross-Site Scripting Description: IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191753. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
sion. IBM X-Force ID: 191753. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191753
CVE ID: CVE-2020-4937 State: PUBLISHED Published: 2020-11-20T13:50:15.078128Z Last Updated: 2024-09-17T04:08:44.771Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/I:N/S:U/UI:N/PR:N/A:N/AC:H/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191814
CVE ID: CVE-2020-4938 State: PUBLISHED Published: 2021-07-12T16:05:26.126920Z Last Updated: 2024-09-17T04:20:21.308Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/S:U/A:N/AC:L/PR:N/I:L/C:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Gain Access Description: IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191815
CVE ID: CVE-2020-4941 State: PUBLISHED Published: 2021-09-23T17:10:29.104156Z Last Updated: 2024-09-17T00:11:26.318Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/S:U/PR:L/A:N/AC:L/UI:N/C:L/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Edge Problem Types: Obtain Information Description: IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191941
CVE ID: CVE-2020-4942 State: PUBLISHED Published: 2021-01-04T14:00:39.581422Z Last Updated: 2024-09-16T21:56:52.515Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AV:N/AC:L/UI:R/PR:N/I:H/C:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Curam SPM Problem Types: Gain Access Description: IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6395108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191942
CVE ID: CVE-2020-4944 State: PUBLISHED Published: 2021-03-30T16:00:27.121714Z Last Updated: 2024-09-17T00:05:27.778Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/AC:H/I:N/PR:N/S:U/C:H/AV:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. IBM X-Force ID: 191944. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191944
CVE ID: CVE-2020-4945 State: PUBLISHED Published: 2021-06-24T18:45:26.111811Z Last Updated: 2024-09-16T16:42:40.242Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/UI:N/I:H/AC:L/PR:L/AV:N/C:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux and UNIX Problem Types: Data Manipulation Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191945 - https://security.netapp.com/advisory
/pages/node/6466367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/191945 - https://security.netapp.com/advisory/ntap-20210720-0006/
CVE ID: CVE-2020-4949 State: PUBLISHED Published: 2021-01-26T14:25:17.496015Z Last Updated: 2024-09-17T03:33:13.998Z Severity: HIGH (CVSS 8.2 CVSS:3.0/C:H/A:L/S:U/UI:N/PR:N/AV:N/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192025. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408244 - http
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192025
CVE ID: CVE-2020-4951 State: PUBLISHED Published: 2021-10-15T15:55:17.303053Z Last Updated: 2024-09-16T18:34:01.248Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/PR:N/A:N/S:U/UI:N/AC:L/C:L/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192027 - https://security.netapp.com/advisory/ntap-20211112-0005/
CVE ID: CVE-2020-4952 State: PUBLISHED Published: 2021-01-27T16:35:34.189014Z Last Updated: 2024-09-16T18:39:01.076Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/PR:L/UI:N/I:H/AV:N/A:H/C:H/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192028
CVE ID: CVE-2020-4953 State: PUBLISHED Published: 2021-02-23T15:20:16.758317Z Last Updated: 2024-09-16T22:24:38.601Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/AV:N/I:N/C:L/A:N/PR:L/AC:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP repsonses. IBM X-Force ID: 192029. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6412707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192029
CVE ID: CVE-2020-4954 State: PUBLISHED Published: 2021-02-15T15:05:19.339316Z Last Updated: 2024-09-17T01:21:33.577Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/C:L/I:L/AV:A/PR:N/UI:N/S:U/AC:H/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Bypass Security Description: IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obtain a valid session using an attacker controlled IBM Spectrum Protect server, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug fu
r, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug functions, such as logging levels. IBM X-Force ID: 192153. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192153