Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38919 State: PUBLISHED Published: 2022-04-27T15:20:35.235356Z Last Updated: 2024-09-16T17:33:20.924Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/PR:N/S:U/UI:N/A:N/C:H/AC:H/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210021
CVE ID: CVE-2021-38921 State: PUBLISHED Published: 2022-01-07T17:55:23.252972Z Last Updated: 2024-09-16T22:41:31.453Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/I:N/C:H/A:N/S:U/PR:N/UI:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210067. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210067
CVE ID: CVE-2021-38923 State: PUBLISHED Published: 2021-10-06T17:50:17.792453Z Last Updated: 2024-09-17T03:18:59.874Z Severity: HIGH (CVSS 8 CVSS:3.0/S:C/UI:N/PR:H/AC:H/I:H/A:H/AV:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Bypass Security Description: IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210162
CVE ID: CVE-2021-38924 State: PUBLISHED Published: 2022-09-14T16:20:11.857671Z Last Updated: 2024-09-16T18:08:57.450Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/C:L/UI:N/AV:N/I:N/AC:L/S:U/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6620059 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6620059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210163
CVE ID: CVE-2021-38925 State: PUBLISHED Published: 2021-10-06T17:10:45.850313Z Last Updated: 2024-09-16T21:08:56.389Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/AC:H/S:U/I:N/AV:N/UI:N/PR:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210171
CVE ID: CVE-2021-38926 State: PUBLISHED Published: 2021-12-09T17:00:27.785050Z Last Updated: 2024-09-16T21:03:40.274Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/PR:L/S:U/AV:L/C:N/AC:L/I:H/UI:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2103
References: - https://www.ibm.com/support/pages/node/6523808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210321 - https://security.netapp.com/advisory/ntap-20220114-0002/
CVE ID: CVE-2021-38927 State: PUBLISHED Published: 2023-12-25T02:20:43.600Z Last Updated: 2024-08-04T01:51:20.879Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-79 Description: IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7101252 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/7101252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210322
CVE ID: CVE-2021-38928 State: PUBLISHED Published: 2023-01-04T17:26:59.970Z Last Updated: 2025-04-10T13:54:51.823Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: 942 Overly Permissive Cross-domain Whitelist Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
trusted domains. IBM X-Force ID: 210323. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210323
CVE ID: CVE-2021-38929 State: PUBLISHED Published: 2022-04-11T18:17:05.229761Z Last Updated: 2024-09-17T00:16:25.793Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/S:U/C:L/A:N/PR:N/I:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Hardware Management Console Problem Types: Obtain Information Description: IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210330. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210330
CVE ID: CVE-2021-38930 State: PUBLISHED Published: 2022-04-11T18:17:07.108858Z Last Updated: 2024-09-16T22:56:16.802Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/C:L/I:N/A:N/PR:N/UI:N/AV:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Hardware Management Console Problem Types: Obtain Information Description: IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210331. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210331
CVE ID: CVE-2021-38931 State: PUBLISHED Published: 2021-12-09T17:00:29.251845Z Last Updated: 2024-09-17T00:31:46.640Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:L/S:U/AV:N/C:H/AC:L/I:N/UI:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523810 - https://exchan
al Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210418 - https://security.netapp.com/advisory/ntap-20220114-0001/
CVE ID: CVE-2021-38933 State: PUBLISHED Published: 2023-07-19T01:22:12.736Z Last Updated: 2024-10-21T18:12:35.944Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Connect:Express for UNIX Problem Types: CWE-327 Description: IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210574
CVE ID: CVE-2021-38934 State: PUBLISHED Published: 2022-08-29T21:10:09.490561Z Last Updated: 2024-09-16T23:51:47.129Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/AV:N/AC:L/PR:L/C:L/UI:R/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Engineering Test Management Problem Types: Cross-Site Scripting Description: IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210671. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
ed session. IBM X-Force ID: 210671. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210671
CVE ID: CVE-2021-38935 State: PUBLISHED Published: 2022-02-18T17:35:17.263836Z Last Updated: 2024-09-17T00:11:40.167Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/A:N/S:U/AV:N/PR:N/UI:N/C:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 210892. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6557318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210892
CVE ID: CVE-2021-38936 State: PUBLISHED Published: 2022-07-20T17:35:17.315504Z Last Updated: 2024-09-16T17:54:31.227Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/I:N/C:H/UI:N/S:U/PR:H/AC:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6605429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210893
CVE ID: CVE-2021-38937 State: PUBLISHED Published: 2021-12-10T17:50:13.044889Z Last Updated: 2024-09-16T16:57:46.403Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/S:C/C:N/A:H/AC:H/UI:N/PR:L/I:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Denial of Service Description: IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210894
CVE ID: CVE-2021-38938 State: PUBLISHED Published: 2024-03-15T15:38:40.853Z Last Updated: 2024-08-04T01:51:20.740Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Host Access Transformation Services Problem Types: CWE-522 Description: IBM Host Access Transformation Services (HATS) 9.6 through 9.6.1.4 and 9.7 through 9.7.0.3 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 210989. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6832964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210989
CVE ID: CVE-2021-38939 State: PUBLISHED Published: 2022-04-27T15:20:36.726132Z Last Updated: 2024-09-16T18:50:21.774Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/C:L/S:U/PR:N/I:N/A:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211037
CVE ID: CVE-2021-38941 State: PUBLISHED Published: 2022-06-30T16:50:16.381616Z Last Updated: 2024-09-16T20:48:17.471Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/AV:N/S:U/C:N/AC:H/A:N/UI:N/I:H/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Multicloud Management Monitoring Problem Types: Gain Privileges Description: IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6599639 - http
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6599639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211048
CVE ID: CVE-2021-38944 State: PUBLISHED Published: 2022-05-18T19:30:12.525006Z Last Updated: 2024-09-16T22:10:33.765Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/C:L/A:N/I:L/UI:N/PR:N/S:U/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateway Problem Types: Gain Access Description: IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 211236. Additional Analyst Note
m, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 211236. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6587070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211236
CVE ID: CVE-2021-38945 State: PUBLISHED Published: 2022-06-24T15:35:24.596054Z Last Updated: 2024-09-17T01:51:36.445Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:H/PR:L/UI:R/AC:L/A:N/S:U/C:L/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211238 - https://security.netapp.com/advisory/ntap-20220729-0002/
CVE ID: CVE-2021-38946 State: PUBLISHED Published: 2022-04-22T16:30:38.614752Z Last Updated: 2024-09-16T20:42:18.208Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/PR:L/I:L/A:N/UI:R/C:L/AC:L/S:C/E:H/RC:C/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211240. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/no
-Force ID: 211240. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211240 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-38947 State: PUBLISHED Published: 2021-12-13T17:55:29.539603Z Last Updated: 2024-09-16T18:35:00.002Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/PR:N/S:U/AC:H/A:N/C:H/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Obtain Information Description: IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211242
CVE ID: CVE-2021-38948 State: PUBLISHED Published: 2021-11-02T16:00:33.758125Z Last Updated: 2024-09-16T22:40:09.171Z Severity: HIGH (CVSS 7.1 CVSS:3.0/S:U/AV:N/PR:L/I:N/A:L/AC:L/C:H/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509632 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211402
CVE ID: CVE-2021-38949 State: PUBLISHED Published: 2021-11-16T16:55:19.555162Z Last Updated: 2024-09-17T00:50:43.084Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/AV:L/S:U/A:N/AC:L/I:N/UI:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211403
CVE ID: CVE-2021-38950 State: PUBLISHED Published: 2021-12-14T16:20:10.693997Z Last Updated: 2024-09-16T20:06:32.121Z Severity: HIGH (CVSS 7.4 CVSS:3.0/PR:N/AC:H/C:H/S:U/I:H/AV:L/A:H/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ for HPE NonStop Problem Types: Gain Privileges Description: IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211404
CVE ID: CVE-2021-38951 State: PUBLISHED Published: 2021-12-09T17:00:30.662216Z Last Updated: 2024-09-16T16:47:45.409Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/S:U/PR:N/C:N/AC:L/I:N/A:H/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Denial of Service Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 211405. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6524674 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6524674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211405
CVE ID: CVE-2021-38952 State: PUBLISHED Published: 2022-04-28T16:10:26.902746Z Last Updated: 2024-09-16T20:57:17.970Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AC:L/A:N/PR:L/I:L/AV:N/UI:R/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 211408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6575551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211408
CVE ID: CVE-2021-38954 State: PUBLISHED Published: 2022-06-30T16:50:20.126836Z Last Updated: 2024-09-16T22:14:32.245Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/UI:N/I:N/PR:L/AV:N/S:U/AC:L/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6599607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211414
CVE ID: CVE-2021-38955 State: PUBLISHED Published: 2022-03-01T16:45:24.203180Z Last Updated: 2024-09-16T23:50:37.182Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:H/UI:N/AV:L/C:N/PR:H/I:N/S:U/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6560236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/211825
CVE ID: CVE-2021-38956 State: PUBLISHED Published: 2022-01-07T17:55:24.652375Z Last Updated: 2024-09-16T16:17:38.644Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/C:L/I:N/A:N/S:U/UI:N/PR:N/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system. IBM X-Force ID: 212038 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212038
CVE ID: CVE-2021-38957 State: PUBLISHED Published: 2022-01-07T17:55:26.027623Z Last Updated: 2024-09-17T04:19:09.483Z Severity: LOW (CVSS 3.1 CVSS:3.0/S:U/PR:N/UI:R/AV:N/I:N/C:L/AC:H/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212040
CVE ID: CVE-2021-38958 State: PUBLISHED Published: 2021-11-30T16:45:15.183527Z Last Updated: 2024-09-16T20:16:24.685Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/S:U/UI:N/A:H/I:N/C:N/AV:L/PR:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6519420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212043