Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4185 State: PUBLISHED Published: 2020-07-30T12:55:14.156737Z Last Updated: 2024-09-16T20:53:06.796Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/C:H/A:N/I:N/PR:N/UI:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174803
CVE ID: CVE-2020-4186 State: PUBLISHED Published: 2020-07-30T12:55:14.650520Z Last Updated: 2024-09-17T03:28:05.342Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/AC:L/AV:N/UI:N/S:U/PR:N/I:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174804
CVE ID: CVE-2020-4187 State: PUBLISHED Published: 2020-06-03T14:30:21.322516Z Last Updated: 2024-09-16T19:14:51.913Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:L/UI:N/A:N/S:U/AV:N/I:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174805
CVE ID: CVE-2020-4188 State: PUBLISHED Published: 2020-06-23T18:05:12.880568Z Last Updated: 2024-09-17T03:33:39.766Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/S:U/AV:N/AC:L/I:N/C:L/PR:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force ID: 174807. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174807
CVE ID: CVE-2020-4189 State: PUBLISHED Published: 2021-01-27T16:35:31.552927Z Last Updated: 2024-09-17T03:33:46.017Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AV:N/S:U/C:L/UI:N/PR:L/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174850
CVE ID: CVE-2020-4190 State: PUBLISHED Published: 2020-06-03T14:30:21.754754Z Last Updated: 2024-09-16T22:25:57.640Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/UI:N/C:H/PR:H/AC:H/I:N/AV:L/A:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218958 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174851
CVE ID: CVE-2020-4191 State: PUBLISHED Published: 2020-06-04T13:35:18.398952Z Last Updated: 2024-09-16T17:24:14.377Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/PR:H/UI:N/A:N/S:U/AC:H/I:N/AV:L/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174852. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174852
CVE ID: CVE-2020-4193 State: PUBLISHED Published: 2020-06-04T13:35:18.836600Z Last Updated: 2024-09-17T01:30:33.391Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/S:U/A:N/UI:N/PR:H/I:N/AC:H/C:H/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 174857. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174857
CVE ID: CVE-2020-4195 State: PUBLISHED Published: 2020-05-12T13:40:17.221514Z Last Updated: 2024-09-16T18:23:51.887Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AV:N/I:L/UI:R/S:C/AC:L/PR:L/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 174859. Additional Analyst Notes: - CVE Program Container: References: - https://www
against the victim. IBM X-Force ID: 174859. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174859
CVE ID: CVE-2020-4196 State: PUBLISHED Published: 2020-03-03T13:50:19.912713Z Last Updated: 2024-09-17T03:17:50.690Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AV:N/I:L/PR:L/UI:R/C:L/AC:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174907. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/569
ID: 174907. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5690828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174907
CVE ID: CVE-2020-4197 State: PUBLISHED Published: 2020-03-03T13:50:20.326030Z Last Updated: 2024-09-16T23:40:43.386Z Severity: LOW (CVSS 2.4 CVSS:3.0/AC:L/C:L/A:N/PR:N/UI:N/I:N/AV:P/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Obtain Information Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5690822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174908
CVE ID: CVE-2020-4198 State: PUBLISHED Published: 2020-03-03T13:50:20.788423Z Last Updated: 2024-09-16T18:33:52.756Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/C:L/AC:L/UI:R/PR:L/I:L/AV:N/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/569
ID: 174909. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5690840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174909
CVE ID: CVE-2020-4199 State: PUBLISHED Published: 2020-03-18T13:55:13.330006Z Last Updated: 2024-09-17T00:26:44.609Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/I:L/AC:L/A:N/PR:N/UI:R/S:U/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Gain Access Description: IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 174910. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5968048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174910
CVE ID: CVE-2020-4200 State: PUBLISHED Published: 2020-02-19T15:15:46.270256Z Last Updated: 2024-09-16T18:54:03.631Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/I:N/PR:L/A:H/UI:N/S:U/C:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated attacker to send specially crafted commands to cause a denial of service. IBM X-Force ID: 174914. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2875251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174914
CVE ID: CVE-2020-4202 State: PUBLISHED Published: 2020-04-23T13:10:23.439424Z Last Updated: 2024-09-16T21:04:17.543Z Severity: MEDIUM (CVSS 5 CVSS:3.0/S:U/AV:N/UI:N/C:L/A:L/I:L/PR:L/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Gain Privileges Description: IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6195701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174955
CVE ID: CVE-2020-4203 State: PUBLISHED Published: 2020-03-19T13:40:15.081520Z Last Updated: 2024-09-16T17:14:21.559Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/S:U/PR:H/AC:L/AV:N/A:N/I:N/C:H/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Obtain Information Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6090934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174956
CVE ID: CVE-2020-4204 State: PUBLISHED Published: 2020-02-19T15:15:46.680208Z Last Updated: 2024-09-16T17:38:12.442Z Severity: HIGH (CVSS 8.4 CVSS:3.0/S:U/UI:N/C:H/AC:L/PR:N/A:H/I:H/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 174960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/28758
D: 174960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2875875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174960
CVE ID: CVE-2020-4205 State: PUBLISHED Published: 2020-03-19T13:40:15.501160Z Last Updated: 2024-09-16T16:38:26.660Z Severity: MEDIUM (CVSS 5 CVSS:3.0/S:U/PR:L/AC:H/AV:N/A:L/I:L/C:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway Problem Types: Bypass Security Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6090886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174961
CVE ID: CVE-2020-4206 State: PUBLISHED Published: 2020-03-31T14:31:23.109893Z Last Updated: 2024-09-16T20:46:43.583Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/I:H/UI:N/AC:H/C:H/PR:L/A:H/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174966
CVE ID: CVE-2020-4207 State: PUBLISHED Published: 2020-01-28T18:30:57.977691Z Last Updated: 2024-09-17T04:20:23.943Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/S:U/A:H/I:H/AC:L/C:H/AV:N/UI:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: WIoTP MessageGateway, IoT MessageSight Problem Types: Gain Access Description: IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking when handling a failed HTTP request with specific content in the headers. By sending a specially crafted HTTP request, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause a denial of service. IBM X-Force ID: 174
acker could overflow a buffer and execute arbitrary code on the system or cause a denial of service. IBM X-Force ID: 174972. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174972
CVE ID: CVE-2020-4208 State: PUBLISHED Published: 2020-03-31T14:31:26.191280Z Last Updated: 2024-09-16T22:30:06.958Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:N/AV:N/PR:N/C:H/AC:L/S:U/I:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174975. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174975
CVE ID: CVE-2020-4209 State: PUBLISHED Published: 2020-05-04T13:30:13.384482Z Last Updated: 2024-09-16T18:04:19.239Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:U/PR:L/UI:N/C:N/A:L/AV:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Data Manipulation Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to create arbitrary files on the system. IBM X-Force ID: 175019. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6116488 - https://exchange
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6116488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175019
CVE ID: CVE-2020-4210 State: PUBLISHED Published: 2020-02-24T15:35:30.950573Z Last Updated: 2024-09-16T18:23:42.138Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/A:H/S:U/C:H/UI:N/I:H/AV:N/PR:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175020 - https://www.zerodayinitiative.com/advisories/ZDI-20-274/
CVE ID: CVE-2020-4211 State: PUBLISHED Published: 2020-02-24T15:35:31.374217Z Last Updated: 2024-09-17T01:36:55.230Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/A:H/S:U/C:H/UI:N/I:H/AV:N/PR:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175022 - https://www.zerodayinitiative.com/advisories/ZDI-20-273/
CVE ID: CVE-2020-4212 State: PUBLISHED Published: 2020-02-24T15:35:31.845193Z Last Updated: 2024-09-16T23:40:30.880Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/PR:N/AV:N/I:H/UI:N/C:H/S:U/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175023 - https://www.zerodayinitiative.com/advisories/ZDI-20-272/
CVE ID: CVE-2020-4213 State: PUBLISHED Published: 2020-02-24T15:35:32.264424Z Last Updated: 2024-09-17T02:01:12.329Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/I:H/AV:N/C:H/UI:N/PR:N/AC:L/A:H/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175024 - https://www.zerodayinitiative.com/advisories/ZDI-20-270/
CVE ID: CVE-2020-4214 State: PUBLISHED Published: 2020-03-31T14:31:29.271996Z Last Updated: 2024-09-16T16:38:42.819Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/UI:N/I:H/PR:N/A:N/AV:N/AC:L/C:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Data Manipulation Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175026
CVE ID: CVE-2020-4216 State: PUBLISHED Published: 2020-06-15T13:25:24.883400Z Last Updated: 2024-09-16T23:06:07.667Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:N/A:N/S:U/UI:N/C:H/AC:L/PR:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 175066. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221332 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175066 - https://www.zerodayinitiative.com/advisories/ZDI-20-710/
CVE ID: CVE-2020-4217 State: PUBLISHED Published: 2020-03-09T14:40:14.564394Z Last Updated: 2024-09-16T23:51:38.046Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:N/PR:N/C:N/AV:N/A:H/AC:L/UI:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 175067. Additional Analyst Notes: - CVE Program Container: References: -
ems managed by Spectrum Scale. IBM X-Force ID: 175067. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5693463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175067
CVE ID: CVE-2020-4222 State: PUBLISHED Published: 2020-02-24T15:35:32.683412Z Last Updated: 2024-09-17T00:31:52.370Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/I:H/UI:N/C:H/AC:L/PR:N/A:H/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3178863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175091 - https://www.zerodayinitiative.com/advisories/ZDI-20-271/
CVE ID: CVE-2020-4223 State: PUBLISHED Published: 2020-06-26T13:45:30.835640Z Last Updated: 2024-09-17T03:43:41.360Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/S:C/AC:L/I:L/UI:R/AV:N/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175121. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 175121. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6238376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175121