Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4262 State: PUBLISHED Published: 2019-09-26T15:05:30.533284Z Last Updated: 2024-09-16T19:01:43.310Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/PR:N/I:L/AC:L/S:U/C:N/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074538 - https://exchange.xforce.ibmclou
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160014
CVE ID: CVE-2019-4263 State: PUBLISHED Published: 2019-07-11T19:55:18.767762Z Last Updated: 2024-09-17T00:36:38.186Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/PR:L/S:U/AC:L/C:L/AV:N/UI:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160015
CVE ID: CVE-2019-4264 State: PUBLISHED Published: 2019-05-29T15:10:24.408232Z Last Updated: 2024-09-16T16:42:35.877Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/UI:N/C:H/AC:H/AV:N/PR:N/A:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885464 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
erences: - https://www.ibm.com/support/docview.wss?uid=ibm10885464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160072 - http://www.securityfocus.com/bid/108535
CVE ID: CVE-2019-4265 State: PUBLISHED Published: 2019-10-10T14:00:19.786270Z Last Updated: 2024-09-17T00:06:45.510Z Severity: LOW (CVSS 2.4 CVSS:3.0/PR:N/I:N/C:L/AV:P/S:U/UI:N/A:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1078995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160198
CVE ID: CVE-2019-4266 State: PUBLISHED Published: 2020-05-06T13:45:18.031588Z Last Updated: 2024-09-16T16:47:53.068Z Severity: LOW (CVSS 2.4 CVSS:3.0/A:N/I:N/AV:P/AC:L/S:U/C:L/PR:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160199. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6205923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160199
CVE ID: CVE-2019-4267 State: PUBLISHED Published: 2019-07-22T13:35:13.827298Z Last Updated: 2024-09-17T04:00:15.880Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/C:L/S:U/A:L/UI:N/AC:H/PR:N/AV:L/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Gain Privileges Description: The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160200
CVE ID: CVE-2019-4268 State: PUBLISHED Published: 2019-09-17T19:05:23.877281Z Last Updated: 2024-09-16T18:59:17.494Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/PR:N/C:L/AV:N/AC:L/S:U/A:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/884030 - https://exc
tional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/884030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160201
CVE ID: CVE-2019-4269 State: PUBLISHED Published: 2019-06-28T16:15:16.241197Z Last Updated: 2024-09-17T02:16:08.525Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/A:N/AV:N/C:L/PR:N/I:N/UI:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain sensitive information when a specially crafted url causes a stack trace to be dumped. IBM X-Force ID: 160202. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10884032 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
nces: - https://www-01.ibm.com/support/docview.wss?uid=ibm10884032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160202 - http://www.securityfocus.com/bid/109000
CVE ID: CVE-2019-4270 State: PUBLISHED Published: 2019-09-17T19:05:23.928631Z Last Updated: 2024-09-17T00:51:07.149Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/S:C/I:L/PR:L/C:L/UI:R/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160203. Additional Analyst Notes: - CVE Program Container: References: - htt
e within a trusted session. IBM X-Force ID: 160203. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/884036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160203
CVE ID: CVE-2019-4271 State: PUBLISHED Published: 2019-09-17T19:05:23.980894Z Last Updated: 2024-09-17T01:26:25.571Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/S:U/AV:N/C:N/PR:L/I:L/UI:R/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/884040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160243
CVE ID: CVE-2019-4275 State: PUBLISHED Published: 2019-08-02T14:10:12.795625Z Last Updated: 2024-09-17T03:12:35.165Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/UI:N/C:N/I:N/AC:L/AV:L/PR:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Denial of Service Description: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of service. IBM X-Force ID: 160296. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10959011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160296
CVE ID: CVE-2019-4279 State: PUBLISHED Published: 2019-05-17T15:20:16.803306Z Last Updated: 2024-09-17T01:45:50.089Z Severity: CRITICAL (CVSS 9 CVSS:3.0/S:C/A:H/AC:H/I:H/C:H/AV:N/PR:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10883628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16044
: - https://www.ibm.com/support/docview.wss?uid=ibm10883628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160445 - http://www.securityfocus.com/bid/108450
CVE ID: CVE-2019-4280 State: PUBLISHED Published: 2019-09-30T15:20:31.101283Z Last Updated: 2024-09-17T03:12:33.328Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/C:L/A:N/I:N/AC:L/PR:N/S:U/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/957207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160503
CVE ID: CVE-2019-4284 State: PUBLISHED Published: 2019-08-05T13:40:15.577805Z Last Updated: 2024-09-17T01:45:57.622Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/UI:N/A:N/C:H/I:N/AC:L/S:U/AV:L/PR:H/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1605
s: - https://www.ibm.com/support/docview.wss?uid=ibm10885454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160512
CVE ID: CVE-2019-4285 State: PUBLISHED Published: 2019-07-30T13:25:14.902606Z Last Updated: 2024-09-16T23:32:03.214Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/PR:L/I:L/UI:R/AV:N/C:L/S:C/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could send a specially-crafted HTTP request to hijack the victim's click actions or launch other client-side browser attacks. IBM X-Force ID: 160513. Additional Analyst Notes: - CVE Program Container:
or launch other client-side browser attacks. IBM X-Force ID: 160513. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160513
CVE ID: CVE-2019-4286 State: PUBLISHED Published: 2020-04-29T13:45:15.082164Z Last Updated: 2024-09-16T22:51:46.109Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AC:L/C:H/AV:P/PR:L/UI:N/A:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6202556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160514
CVE ID: CVE-2019-4288 State: PUBLISHED Published: 2020-04-29T13:45:15.501121Z Last Updated: 2024-09-17T03:14:35.347Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:H/AV:P/PR:L/S:U/AC:L/UI:N/A:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6202708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160631
CVE ID: CVE-2019-4291 State: PUBLISHED Published: 2022-02-16T17:00:15.604539Z Last Updated: 2024-09-16T22:41:03.211Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/A:N/UI:N/AV:N/C:L/PR:N/AC:L/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6556834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160697
CVE ID: CVE-2019-4292 State: PUBLISHED Published: 2019-07-02T15:05:23.340205Z Last Updated: 2024-09-16T18:24:35.617Z Severity: HIGH (CVSS 8.8 CVSS:3.0/PR:L/A:H/S:U/I:H/C:H/AC:L/AV:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Gain Access Description: IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160698 - http://www.securityfocus.com/bid/1090
ss?uid=ibm10888279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160698 - http://www.securityfocus.com/bid/109005
CVE ID: CVE-2019-4293 State: PUBLISHED Published: 2019-05-20T17:25:23.468576Z Last Updated: 2024-09-17T00:21:09.620Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/A:N/I:N/AC:L/PR:N/C:L/AV:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Storwize V7000 Unified (2073) Problem Types: Obtain Information Description: IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160699 -
https://www.ibm.com/support/docview.wss?uid=ibm10884656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160699 - http://www.securityfocus.com/bid/108445
CVE ID: CVE-2019-4294 State: PUBLISHED Published: 2019-08-20T18:25:26.483137Z Last Updated: 2024-09-16T18:34:28.475Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/A:H/C:H/PR:N/I:H/UI:N/AV:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Appliance, DataPower Gateway Problem Types: Gain Privileges Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
ulnerability. IBM X-Force ID: 16188. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887005 - https://www.ibm.com/support/docview.wss?uid=ibm10958933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160701
CVE ID: CVE-2019-4295 State: PUBLISHED Published: 2019-07-01T15:05:37.883964Z Last Updated: 2024-09-16T18:18:17.111Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/A:N/S:U/AV:N/AC:L/C:H/PR:H/UI:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker with specialized access to obtain highly sensitive from the credential vault. IBM X-Force ID: 160758. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160758
CVE ID: CVE-2019-4296 State: PUBLISHED Published: 2019-07-01T15:05:37.940230Z Last Updated: 2024-09-17T01:20:46.808Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/S:U/AC:L/AV:L/C:L/PR:N/UI:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from the client debug log file. IBM X-Force ID: 160759. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160759
CVE ID: CVE-2019-4297 State: PUBLISHED Published: 2019-07-01T15:05:37.995060Z Last Updated: 2024-09-17T01:22:02.853Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/C:L/PR:L/AV:N/AC:L/I:L/UI:N/A:N/S:C/E:U/RL:O/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Gain Access Description: IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/
AP content. IBM X-Force ID: 160761. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160761
CVE ID: CVE-2019-4298 State: PUBLISHED Published: 2019-07-01T15:05:38.050347Z Last Updated: 2024-09-17T03:29:06.637Z Severity: HIGH (CVSS 7.7 CVSS:3.0/S:U/A:N/PR:N/C:H/AC:L/AV:L/I:H/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Data Manipulation Description: IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow a local user to perform actions they should not have privileges to execute. IBM X-Force ID: 160764. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884820 - https://exchange
Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160764
CVE ID: CVE-2019-4299 State: PUBLISHED Published: 2019-07-01T15:05:38.117710Z Last Updated: 2024-09-16T23:55:25.743Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/I:N/AC:H/AV:L/PR:N/C:H/S:U/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain highly sensitive information from log files when debugging is enabled. IBM X-Force ID: 160765. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160765
CVE ID: CVE-2019-4301 State: PUBLISHED Published: 2020-02-28T21:05:15 Last Updated: 2024-08-04T19:33:38.110Z Vendors: IBM Corporation Products: HCL BigFix Self-Service Application (SSA) Problem Types: Arbitrary code execution Description: BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076139
CVE ID: CVE-2019-4303 State: PUBLISHED Published: 2019-06-19T13:30:19.709079Z Last Updated: 2024-09-16T23:00:36.112Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/S:C/A:N/AC:L/UI:R/AV:N/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160949. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ib
160949. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160949 - http://www.securityfocus.com/bid/108912
CVE ID: CVE-2019-4304 State: PUBLISHED Published: 2019-09-30T15:20:31.527340Z Last Updated: 2024-09-16T18:38:39.225Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/AC:L/I:L/A:L/C:L/UI:N/AV:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/960171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160950
CVE ID: CVE-2019-4305 State: PUBLISHED Published: 2019-09-30T15:20:31.961209Z Last Updated: 2024-09-16T17:33:10.000Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AV:N/I:N/UI:N/A:N/C:L/AC:L/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/960171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160951
CVE ID: CVE-2019-4306 State: PUBLISHED Published: 2019-10-28T23:36:07.863043Z Last Updated: 2024-09-17T00:37:13.460Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:N/I:L/AC:L/S:U/A:N/AV:N/UI:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Gain Access Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-Force ID: 160986. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096396 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160986
CVE ID: CVE-2019-4307 State: PUBLISHED Published: 2019-10-28T23:36:08.303351Z Last Updated: 2024-09-16T19:05:02.624Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/C:H/UI:N/AV:L/PR:N/I:N/AC:H/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160987