Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1567 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T19:55:55.760Z Vendors: IBM Products: Rational DOORS Problem Types: Cross-Site Scripting Description: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102851 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - https://exchange.xforce.ibmcloud.com/vulnerabilit
/bid/102851 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131769
CVE ID: CVE-2017-1568 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T03:32:55.853Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131778. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131778
CVE ID: CVE-2017-1569 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-16T22:14:25.989Z Vendors: IBM Products: WebSphere Commerce Enterprise Problem Types: Denial of Service Description: IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101073 - http://www.ibm.com/support/docview.wss?uid=swg22008547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131779
CVE ID: CVE-2017-1570 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-16T20:07:09.604Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102020 - http://www.ibm.com/support/docview.wss?uid=swg22010512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131852
CVE ID: CVE-2017-1571 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-17T02:16:22.591Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 131853. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103494 - http://www.ibm.com/support/docview.wss?uid=swg22012948 - https://exchan
ces: - http://www.securityfocus.com/bid/103494 - http://www.ibm.com/support/docview.wss?uid=swg22012948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131853
CVE ID: CVE-2017-1575 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-16T20:36:16.218Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - http
r: References: - http://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132032
CVE ID: CVE-2017-1577 State: PUBLISHED Published: 2017-09-27T17:00:00Z Last Updated: 2024-09-16T23:56:44.548Z Vendors: IBM Products: WebSphere Portal Problem Types: Obtain Information Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/132117 - http://www.securityfocus.com/bid/101017 - http://www.securitytracker.com/id/1039405 - http://www.ibm.com/su
ies/132117 - http://www.securityfocus.com/bid/101017 - http://www.securitytracker.com/id/1039405 - http://www.ibm.com/support/docview.wss?uid=swg22008586
CVE ID: CVE-2017-1583 State: PUBLISHED Published: 2017-10-24T21:00:00 Last Updated: 2024-08-05T13:39:31.874Z Vendors: IBM Products: Liberty for Java for Bluemix Problem Types: Obtain Information Description: IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/132342 - http://www.ibm.com/support/docview.wss?uid=swg22009704 - http://www.securityfocus.com/bid/101522 - http://www.securitytracker.com/id/1039695
CVE ID: CVE-2017-1591 State: PUBLISHED Published: 2017-09-27T17:00:00Z Last Updated: 2024-09-16T18:55:34.902Z Vendors: IBM Products: DataPower Gateways Problem Types: Cross-Site Scripting Description: IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132368. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132368 - http:
://www.ibm.com/support/docview.wss?uid=swg22008815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132368 - http://www.securityfocus.com/bid/101021
CVE ID: CVE-2017-1592 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T04:04:22.019Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132493. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/132493 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1593 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-16T17:13:57.783Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132494. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132494 - http://
ences: - http://www.securityfocus.com/bid/101895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132494 - http://www.ibm.com/support/docview.wss?uid=swg22010321
CVE ID: CVE-2017-1595 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T18:13:00.443Z Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132549
CVE ID: CVE-2017-1596 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T21:07:50.077Z Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132550
CVE ID: CVE-2017-1597 State: PUBLISHED Published: 2018-12-17T16:00:00Z Last Updated: 2024-09-16T16:34:00.796Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106236 - https://www.ibm.com/support/docview.wss?uid=swg22
ram Container: References: - http://www.securityfocus.com/bid/106236 - https://www.ibm.com/support/docview.wss?uid=swg22014231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132610
CVE ID: CVE-2017-1598 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T16:33:12.166Z Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132611
CVE ID: CVE-2017-1600 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T16:49:10.142Z Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/132613 - http://www.ibm.com/support/docview.wss?uid=swg22009622
CVE ID: CVE-2017-1601 State: PUBLISHED Published: 2018-05-02T13:00:00 Last Updated: 2024-08-05T13:39:31.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132624 - http://www.securitytracker.com/id/1040899
CVE ID: CVE-2017-1602 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-16T22:41:23.882Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Bypass Security Description: IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103477 - http://www.ibm.com/support/docview.wss?uid=swg22014815 - https://exchange.xforce.ibmcl
ww.securityfocus.com/bid/103477 - http://www.ibm.com/support/docview.wss?uid=swg22014815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132625
CVE ID: CVE-2017-1604 State: PUBLISHED Published: 2018-02-21T21:00:00Z Last Updated: 2024-09-16T23:20:45.122Z Vendors: IBM Products: Maximo Anywhere Problem Types: Cross-Site Scripting Description: IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132851. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/132851 - http://www.ibm.com/support/docview.wss?uid=swg22011883 - http://www.securityfocus.com/
loud.com/vulnerabilities/132851 - http://www.ibm.com/support/docview.wss?uid=swg22011883 - http://www.securityfocus.com/bid/103126
CVE ID: CVE-2017-1606 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-16T16:22:54.943Z Vendors: IBM Products: Financial Transaction Manager Problem Types: Data Manipulation Description: IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102049 - http://www.ibm.com/support/docview.wss?uid=swg22011179 - https://exchange.xfo
http://www.securityfocus.com/bid/102049 - http://www.ibm.com/support/docview.wss?uid=swg22011179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132926
CVE ID: CVE-2017-1607 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-16T22:51:52.410Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132927 - http:/
//www.ibm.com/support/docview.wss?uid=swg22010329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132927 - http://www.securityfocus.com/bid/101904
CVE ID: CVE-2017-1608 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T01:56:04.755Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132928. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132928
CVE ID: CVE-2017-1609 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T18:54:24.764Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132929. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.co
sted session. IBM X-Force ID: 132929. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10738137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132929 - http://www.securityfocus.com/bid/106384
CVE ID: CVE-2017-1612 State: PUBLISHED Published: 2018-01-09T20:00:00Z Last Updated: 2024-09-16T18:29:50.060Z Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user. IBM X-Force ID: 132953. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040175 - http://www.securityfocus.com/bid/102479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132953 - http://www.ibm.com/support/docview.wss?uid=swg22009918
CVE ID: CVE-2017-1613 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-16T23:01:54.455Z Vendors: IBM Products: Connections Problem Types: Obtain Information Description: IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive Engagement Center template data. IBM X-Force ID: 132954. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102051 - http://www.ibm.com/support/docview.wss?uid=swg22010690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/132954
CVE ID: CVE-2017-1621 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T19:01:40.077Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133088. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/133088 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1622 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-17T00:31:28.758Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/133120
CVE ID: CVE-2017-1623 State: PUBLISHED Published: 2018-01-10T17:00:00Z Last Updated: 2024-09-16T18:39:24.281Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133121. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/133121 - http://www.ibm.com/support/docview.wss?uid=swg22012344 - http://www.securityfocus.com/bid/
.com/vulnerabilities/133121 - http://www.ibm.com/support/docview.wss?uid=swg22012344 - http://www.securityfocus.com/bid/102476
CVE ID: CVE-2017-1624 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T00:10:26.886Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: Gain Access Description: IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/133122 - http://www.ibm.com/support/docview.wss?uid=swg22015236
CVE ID: CVE-2017-1625 State: PUBLISHED Published: 2018-03-08T16:00:00Z Last Updated: 2024-09-17T00:45:52.629Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Pulse for QRadar Problem Types: Obtain Information Description: IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 133123. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103398 - http://www.ibm.com/support/docview.wss?uid=swg22014284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/133123
CVE ID: CVE-2017-1628 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-16T18:08:10.588Z Vendors: IBM Products: Business Process Manager Problem Types: Denial of Service Description: IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/133126 - http://www.securityfocus.com/bid/101900 - http://www.ibm.com/support/docview.wss?uid=swg22009496 - http://www.securitytracker.com/id/1039777