Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e victim. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/security-bulletin-ibm-infosphere-information-server-vulnerable-cross-frame-scripting-exploit-cve-2021-29827
CVE ID: CVE-2021-29831 State: PUBLISHED Published: 2021-09-21T16:00:16.216646Z Last Updated: 2024-09-16T16:43:23.436Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/A:L/C:H/UI:N/PR:L/S:U/I:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Obtain Information Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 204775. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages
M X-Force ID: 204775. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204775
CVE ID: CVE-2021-29832 State: PUBLISHED Published: 2021-09-23T18:05:45.366443Z Last Updated: 2024-09-17T00:26:24.973Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/AC:L/C:L/PR:L/A:N/I:L/AV:N/S:C/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204824. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204824. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204824
CVE ID: CVE-2021-29833 State: PUBLISHED Published: 2021-09-23T18:05:46.993330Z Last Updated: 2024-09-16T22:55:55.194Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/C:L/AC:L/PR:L/A:N/I:L/AV:N/S:C/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204825. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204825. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204825
CVE ID: CVE-2021-29834 State: PUBLISHED Published: 2021-09-29T15:55:11.692123Z Last Updated: 2024-09-17T01:56:18.120Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/UI:N/I:L/AV:N/PR:L/S:C/C:L/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Business Automation Workflow, Business Process Manager Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti
o embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204832. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6493271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204832
CVE ID: CVE-2021-29835 State: PUBLISHED Published: 2021-10-22T19:00:12.252354Z Last Updated: 2024-09-16T16:28:45.527Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/UI:R/S:C/A:N/AV:N/I:L/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204833. Additional Analyst Notes: - CVE Program Container: References: - https://www.
a trusted session. IBM X-Force ID: 204833. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6507319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204833
CVE ID: CVE-2021-29836 State: PUBLISHED Published: 2021-10-06T17:10:39.325281Z Last Updated: 2024-09-16T19:04:52.712Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/C:L/AC:L/S:C/UI:R/AV:N/I:L/RL:O/E:H/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204912. Additional Analyst Notes: - CVE Program Container: References: - https:/
thin a trusted session. IBM X-Force ID: 204912. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204912
CVE ID: CVE-2021-29837 State: PUBLISHED Published: 2021-10-06T17:10:41.108863Z Last Updated: 2024-09-17T02:36:11.572Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/I:L/AV:N/S:U/AC:L/C:N/A:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495907 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204913
CVE ID: CVE-2021-29838 State: PUBLISHED Published: 2022-01-26T17:40:14.768650Z Last Updated: 2024-09-17T01:50:47.039Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/UI:N/PR:N/I:N/S:U/AC:H/C:H/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6550866 -
ques. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6550866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205026
CVE ID: CVE-2021-29841 State: PUBLISHED Published: 2021-09-14T13:25:27.806449Z Last Updated: 2024-09-17T03:49:12.177Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/S:C/AV:N/PR:L/A:N/UI:R/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Financial Transaction Manager Problem Types: Cross-Site Scripting Description: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pag
IBM X-Force ID: 205045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205045
CVE ID: CVE-2021-29842 State: PUBLISHED Published: 2021-09-16T15:50:21.807719Z Last Updated: 2024-09-17T01:16:13.508Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/C:L/A:N/S:U/UI:N/PR:N/AV:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server, WebSphere Application Server Liberty Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489485 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205202
CVE ID: CVE-2021-29843 State: PUBLISHED Published: 2021-11-08T16:50:32.227400Z Last Updated: 2024-09-17T00:26:18.641Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/C:N/AC:H/S:U/A:H/UI:N/PR:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6513681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205203
CVE ID: CVE-2021-29844 State: PUBLISHED Published: 2021-10-27T16:00:31.302142Z Last Updated: 2024-09-16T17:59:19.776Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/S:U/PR:L/AV:N/A:N/UI:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Workflow Management, Rational DOORS Next Generation, Rational Team Concert, Rational Engineering Lifecycle Manager, Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management Problem Types: Gain Access Description: IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilit
henticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6508583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205205
CVE ID: CVE-2021-29845 State: PUBLISHED Published: 2022-01-26T17:40:16.332834Z Last Updated: 2024-09-17T02:20:39.776Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/PR:L/UI:N/I:L/AC:L/S:U/A:N/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Insights Problem Types: Bypass Security Description: IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. IBM X-Force ID: 205255. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6550866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205255
CVE ID: CVE-2021-29846 State: PUBLISHED Published: 2022-01-26T17:40:17.678591Z Last Updated: 2024-09-16T16:49:12.202Z Severity: LOW (CVSS 2.2 CVSS:3.0/I:N/A:N/C:L/AC:H/S:U/UI:N/PR:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 205256. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6550866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205256
CVE ID: CVE-2021-29847 State: PUBLISHED Published: 2021-12-15T17:05:11.742828Z Last Updated: 2024-09-16T16:37:38.378Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/I:N/S:U/UI:R/C:H/AC:H/A:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Power System S821LC Server (8001-12C) Problem Types: Obtain Information Description: BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
rce ID: 205267. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205267
CVE ID: CVE-2021-29849 State: PUBLISHED Published: 2021-12-01T17:05:23.476544Z Last Updated: 2024-09-17T00:25:54.131Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/UI:R/AV:N/A:N/C:L/I:L/AC:L/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520476 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205281
CVE ID: CVE-2021-29851 State: PUBLISHED Published: 2021-09-01T16:20:14.084571Z Last Updated: 2024-09-17T00:21:38.839Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/PR:L/S:U/AC:L/C:L/I:N/AV:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6480413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205527
CVE ID: CVE-2021-29852 State: PUBLISHED Published: 2021-09-01T16:20:17.759998Z Last Updated: 2024-09-17T01:46:01.670Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/UI:R/AC:L/C:L/I:L/S:C/A:N/PR:L/RC:C/E:H/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205528. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6480413 - ht
28. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6480413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205528
CVE ID: CVE-2021-29853 State: PUBLISHED Published: 2021-09-01T16:20:19.385079Z Last Updated: 2024-09-16T17:08:26.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AC:L/C:L/I:N/AV:N/UI:N/A:N/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6480413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205529
CVE ID: CVE-2021-29854 State: PUBLISHED Published: 2022-05-03T18:20:11.758584Z Last Updated: 2024-09-16T19:51:21.262Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:N/PR:L/C:L/S:U/AV:N/I:L/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning
the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 205680. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6579187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205680
CVE ID: CVE-2021-29855 State: PUBLISHED Published: 2021-10-06T17:10:42.649103Z Last Updated: 2024-09-17T01:05:46.716Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/AC:L/C:L/I:L/AV:N/UI:R/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205684. Additional Analyst Notes: - CVE Program Container: References: - https://
hin a trusted session. IBM X-Force ID: 205684. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205684
CVE ID: CVE-2021-29856 State: PUBLISHED Published: 2021-09-20T16:45:58.093730Z Last Updated: 2024-09-17T04:09:11.930Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/A:H/S:U/C:N/PR:L/AV:N/AC:L/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Denial of Service Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/205685
CVE ID: CVE-2021-29859 State: PUBLISHED Published: 2022-05-02T16:55:10.569183Z Last Updated: 2024-09-16T18:49:20.712Z Severity: LOW (CVSS 3.5 CVSS:3.0/S:U/A:N/AV:P/PR:N/AC:L/C:L/I:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Business Automation Problem Types: Obtain Information Description: IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 2060
in sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6578583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206081
CVE ID: CVE-2021-29860 State: PUBLISHED Published: 2021-11-17T14:00:14.696316Z Last Updated: 2024-09-17T02:51:31.350Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/AC:L/C:H/A:N/I:N/PR:N/AV:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: VIOS, AIX Problem Types: Obtain Information Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206084
CVE ID: CVE-2021-29861 State: PUBLISHED Published: 2021-11-17T14:00:16.343676Z Last Updated: 2024-09-16T22:35:23.461Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/PR:N/S:U/I:N/C:H/A:N/UI:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: AIX, VIOS Problem Types: Obtain Information Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206085
CVE ID: CVE-2021-29862 State: PUBLISHED Published: 2021-08-26T19:25:29.255953Z Last Updated: 2024-09-16T18:03:15.846Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/S:U/A:H/PR:N/AV:L/UI:N/I:N/AC:L/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 206086. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6483875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206086
CVE ID: CVE-2021-29863 State: PUBLISHED Published: 2021-12-01T17:05:24.948908Z Last Updated: 2024-09-16T23:22:15.069Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/A:N/PR:L/AC:L/I:L/S:U/AV:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This vulnerability is due to an incomplete fix for CVE-2020-4786. IBM X-Force ID: 206087. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
20-4786. IBM X-Force ID: 206087. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206087
CVE ID: CVE-2021-29864 State: PUBLISHED Published: 2022-08-30T18:40:09.653884Z Last Updated: 2024-09-17T02:15:34.065Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/C:N/UI:R/A:N/AV:N/S:C/I:H/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive
a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 206089 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6616101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/206089
CVE ID: CVE-2021-29865 State: PUBLISHED Published: 2022-06-24T16:15:40.841794Z Last Updated: 2024-09-17T02:42:06.431Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/AC:L/S:C/A:N/PR:L/I:L/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Jazz Team Server Problem Types: Gain Access Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 206091. Additional Analyst Notes: - CVE Program Container: Referenc