Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
browser of every user who has enabled notifications. This is a stored XSS, and can lead to privilege escalation in the context of the application. (Another issue is present in the Favorites tab. The name of a favorite or a folder of favorites is interpreted as HTML, and can thus embed JavaScript code, which is executed when displayed. This is a self-XSS.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synacktiv.com/sites/default/files/2022-12/sage_sei_multiple_xss.pdf
CVE ID: CVE-2022-34323 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T14:07:54.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model features (OnlineBanking > Web Monitoring > Settings > Filters / Display models). The name of a filter or a display model is interpreted as HTML and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS
model is interpreted as HTML and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. Another issue is present in the Notification feature (OnlineBanking > Configuration > Notifications and alerts > Alerts *). The name of an alert is interpreted as HTML, and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. (Also, an issue is present in the File download feature, accessible via /OnlineBanking/cgi/isapi.dll/DOWNLOADFRS. When requesting to show the list of downloadable files, the contents of three form fields are embedded in the JavaScript code without prior sanitization. This is essentially a self-XSS.) Additional Analy
fields are embedded in the JavaScript code without prior sanitization. This is essentially a self-XSS.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_xss.pdf
CVE ID: CVE-2022-34324 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T14:06:54.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf
CVE ID: CVE-2022-34325 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:54:12.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.in
ion provided by Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022057
CVE ID: CVE-2022-34326 State: PUBLISHED Published: 2022-09-27T00:00:00.000Z Last Updated: 2025-05-21T15:32:46.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection (with four-way handshake) failures in Soft AP mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.realtek.com/en - https://www.amebaiot.com/en/security_bulletin/cve-2022-34326/
CVE ID: CVE-2022-34328 State: PUBLISHED Published: 2022-06-22T19:16:48 Last Updated: 2024-08-03T09:07:16.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenaye/PMB
CVE ID: CVE-2022-34329 State: PUBLISHED Published: 2022-11-14T17:34:19.387Z Last Updated: 2025-04-25T20:27:10.327Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: CICS TX Problem Types: CWE-200 Description: IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833212 - https://www.ibm.com/support/pages/node/6833210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229467
CVE ID: CVE-2022-34330 State: PUBLISHED Published: 2023-01-04T17:07:29.311Z Last Updated: 2025-04-10T13:57:58.342Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-79 Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229469. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ib
rce ID: 229469. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229469
CVE ID: CVE-2022-34331 State: PUBLISHED Published: 2022-11-11T17:45:30.583Z Last Updated: 2025-05-01T13:58:40.577Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: IBM Products: Power FW Problem Types: CWE-287 Description: After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229695
CVE ID: CVE-2022-34333 State: PUBLISHED Published: 2023-04-07T12:58:38.888Z Last Updated: 2025-02-10T15:22:51.638Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Order Management Problem Types: CWE-521 Description: IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 229698. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6981917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229698
CVE ID: CVE-2022-34334 State: PUBLISHED Published: 2022-10-10T20:43:16.649592Z Last Updated: 2024-09-16T20:42:22.273Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/UI:N/AC:L/C:L/A:L/PR:L/AV:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: Gain Privileges Description: IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6828097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229704
CVE ID: CVE-2022-34335 State: PUBLISHED Published: 2023-01-11T16:42:28.168Z Last Updated: 2025-04-08T13:55:02.342Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-400 Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.1 could allow an authenticated user to exhaust server resources which could lead to a denial of service. IBM X-Force ID: 229705. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6854331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229705
CVE ID: CVE-2022-34336 State: PUBLISHED Published: 2022-09-13T20:45:25.070872Z Last Updated: 2024-09-17T02:52:56.187Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/AC:L/UI:R/AV:N/A:N/C:L/I:L/RL:O/E:H/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
usted session. IBM X-Force ID: 229714. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6619699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229714
CVE ID: CVE-2022-34338 State: PUBLISHED Published: 2022-07-31T17:31:09.242010Z Last Updated: 2024-09-17T02:01:44.430Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/S:C/C:H/A:N/AC:H/I:N/UI:N/AV:N/PR:H/E:U/RL:O/RC:C) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229962
CVE ID: CVE-2022-34339 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T20:23:35.904Z Vendors: n/a Products: IBM Cognos Analytics Problem Types: Information Disclosure Description: "IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 229963." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6828527
CVE ID: CVE-2022-34344 State: PUBLISHED Published: 2024-01-08T21:13:45.107Z Last Updated: 2025-05-23T16:02:15.813Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Rymera Web Co Products: Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More Problem Types: CWE-862 Description: Missing Authorization vulnerability in Rymera Web Co Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More.This issue affects Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More
lesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More: from n/a through 2.1.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-wholesale-prices/wordpress-wholesale-suite-plugin-2-1-5-auth-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2022-34345 State: PUBLISHED Published: 2022-08-18T20:05:20.000Z Last Updated: 2025-02-05T20:55:24.876Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-34346 State: PUBLISHED Published: 2023-02-16T20:00:16.903Z Last Updated: 2025-01-27T18:16:35.354Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: escalation of privilege Description: Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html
CVE ID: CVE-2022-34347 State: PUBLISHED Published: 2022-08-22T14:47:17.297Z Last Updated: 2025-02-20T20:13:12.185Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: W3 Eden, Inc. Products: Download Manager (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/download-manager/#developers
CVE ID: CVE-2022-34348 State: PUBLISHED Published: 2022-09-23T17:35:15.321Z Last Updated: 2025-05-22T19:50:29.089Z Severity: HIGH (CVSS 7.1 CVSS:3.0/I:N/S:U/AC:L/UI:N/PR:L/C:H/AV:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Partner Engagement Manager Problem Types: Gain Access Description: IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6695927 - ht
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6695927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230017
CVE ID: CVE-2022-34350 State: PUBLISHED Published: 2023-02-08T19:12:31.221Z Last Updated: 2025-03-25T13:50:09.275Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: API Connect Problem Types: CWE 435 Improper Interaction Between Multiple Correctly-Behaving Entities Description: IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By sub
rability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 230264. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6921243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230264
CVE ID: CVE-2022-34351 State: PUBLISHED Published: 2023-02-17T18:40:31.630Z Last Updated: 2025-03-12T19:58:21.907Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-200 Description: IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6955059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230402
CVE ID: CVE-2022-34352 State: PUBLISHED Published: 2023-06-27T17:39:02.617Z Last Updated: 2024-11-12T15:14:23.943Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: CWE-200 Description: IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7006057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230403
CVE ID: CVE-2022-34354 State: PUBLISHED Published: 2022-11-16T16:25:44.345Z Last Updated: 2025-04-25T19:35:04.739Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Partner Engagement Manager Problem Types: CWE-922 Description: IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6839751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230424
CVE ID: CVE-2022-34355 State: PUBLISHED Published: 2023-10-06T20:43:33.423Z Last Updated: 2024-09-19T14:36:37.954Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Engineering Lifecycle Management Problem Types: CWE-200 Description: IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version information to a user that could be used in further attacks against the system. IBM X-Force ID: 230498. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7046995 - https://exchange.xforce.ibmcloud.com/vulnerabilit
chment: References: - https://www.ibm.com/support/pages/node/7046995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230498
CVE ID: CVE-2022-34356 State: PUBLISHED Published: 2022-09-13T20:45:26.108001Z Last Updated: 2024-09-17T00:02:24.650Z Severity: HIGH (CVSS 8.4 CVSS:3.0/C:H/A:H/I:H/AV:L/UI:N/AC:L/S:U/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: VIOS, AIX Problem Types: Gain Privileges Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6619721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230502
CVE ID: CVE-2022-34357 State: PUBLISHED Published: 2024-02-24T15:38:49.771Z Last Updated: 2025-02-13T16:32:46.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-770 Description: IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
. IBM X-Force ID: 230510. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230510 - https://security.netapp.com/advisory/ntap-20240405-0001/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2022-34358 State: PUBLISHED Published: 2022-07-13T16:40:10.437697Z Last Updated: 2024-09-16T22:20:07.201Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/UI:R/C:L/S:C/AV:N/AC:L/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: i Problem Types: Cross-Site Scripting Description: IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603131 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230516
CVE ID: CVE-2022-34361 State: PUBLISHED Published: 2022-12-06T17:52:40.621Z Last Updated: 2025-04-23T13:44:40.796Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Secure Proxy Problem Types: CWE-327 Description: IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 230522. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6844763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230522
CVE ID: CVE-2022-34362 State: PUBLISHED Published: 2023-02-08T18:30:03.902Z Last Updated: 2025-03-24T20:49:37.610Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Sterling Secure Proxy Problem Types: 644 Improper Neutralization of HTTP Headers for Scripting Syntax Description: IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 230523. Additional Analyst Notes: - CVE Program Container: - CISA ADP
he poisoning or session hijacking. IBM X-Force ID: 230523. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/230523
CVE ID: CVE-2022-34364 State: PUBLISHED Published: 2023-02-10T19:13:42.880Z Last Updated: 2024-08-03T09:07:16.240Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: BSAFE SSL-J Problem Types: CWE-1295 Description: Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. . Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000203275/dsa-2022-188-dell-bsafe-ssl-j-6-5-and-7-1-security-vulnerability
CVE ID: CVE-2022-34365 State: PUBLISHED Published: 2022-08-10T16:31:49.737947Z Last Updated: 2024-09-16T16:27:55.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-22 Description: WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-
ences: - https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities