Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20498 State: PUBLISHED Published: 2021-07-15T17:15:50.474619Z Last Updated: 2024-09-17T00:42:21.507Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:L/UI:N/S:U/I:N/AV:N/A:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. IBM X-Force ID: 197972. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197972
CVE ID: CVE-2021-20499 State: PUBLISHED Published: 2021-07-15T17:15:52.086443Z Last Updated: 2024-09-16T20:21:31.261Z Severity: LOW (CVSS 2.7 CVSS:3.0/A:N/AV:N/AC:L/S:U/I:N/C:L/UI:N/PR:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197973 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197973
CVE ID: CVE-2021-20500 State: PUBLISHED Published: 2021-07-15T17:15:53.660540Z Last Updated: 2024-09-17T04:04:52.852Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AC:L/A:N/AV:L/S:U/I:N/PR:H/C:H/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-Force ID: 197980. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197980
CVE ID: CVE-2021-20501 State: PUBLISHED Published: 2021-04-21T12:05:22.224329Z Last Updated: 2024-09-17T00:35:46.205Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/C:N/S:U/AC:H/A:H/UI:N/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: i Problem Types: Denial of Service Description: IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056. Additional Analyst Notes: - CVE Program Container: References: - https:
kers to send spam email. IBM X-Force ID: 198056. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198056
CVE ID: CVE-2021-20502 State: PUBLISHED Published: 2021-03-30T16:45:30.720803Z Last Updated: 2024-09-17T04:13:44.074Z Severity: HIGH (CVSS 7.1 CVSS:3.0/I:N/C:H/UI:N/AV:N/AC:L/A:L/S:U/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Engineering Lifecycle Manager, Rational Team Concert Problem Types: Obtain Information Description: IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059. Additional Analyst Notes: - CVE Program C
ose sensitive information or consume memory resources. IBM X-Force ID: 198059. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198059
CVE ID: CVE-2021-20503 State: PUBLISHED Published: 2021-03-30T16:45:31.424642Z Last Updated: 2024-09-17T04:09:00.087Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/UI:R/AV:N/AC:L/A:N/S:C/PR:L/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Workflow Management, Engineering Lifecycle Optimization, Rational Team Concert, Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198182
CVE ID: CVE-2021-20504 State: PUBLISHED Published: 2021-03-30T16:45:32.118822Z Last Updated: 2024-09-17T00:46:59.724Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AV:N/UI:R/C:L/PR:L/S:C/AC:L/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Team Concert, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Engineering Lifecycle Optimization Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198231
CVE ID: CVE-2021-20505 State: PUBLISHED Published: 2021-07-29T12:00:12.703669Z Last Updated: 2024-09-16T17:49:06.197Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/UI:N/S:U/I:N/C:H/AC:H/PR:H/AV:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Obtain Information Description: The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to perform a series of PowerVM service procedures to decrypt the captured migration traffic IBM X-Force ID: 1
nformation to perform a series of PowerVM service procedures to decrypt the captured migration traffic IBM X-Force ID: 198232 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6475619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198232
CVE ID: CVE-2021-20506 State: PUBLISHED Published: 2021-03-30T16:45:32.794674Z Last Updated: 2024-09-16T19:25:24.647Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/C:L/AV:N/I:L/A:N/AC:L/S:C/PR:L/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Engineering Lifecycle Manager, Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198233
CVE ID: CVE-2021-20507 State: PUBLISHED Published: 2021-07-19T16:00:25.382956Z Last Updated: 2024-09-17T03:12:37.030Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/C:L/AC:L/S:C/AV:N/I:L/PR:L/UI:R/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Workflow Management, Rational Team Concert, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote
ulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6473141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198235
CVE ID: CVE-2021-20508 State: PUBLISHED Published: 2021-09-14T13:25:22.106390Z Last Updated: 2024-09-17T04:09:56.319Z Severity: LOW (CVSS 2.7 CVSS:3.0/UI:N/AC:L/A:N/PR:H/AV:N/S:U/I:N/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488459 - https://exchange.xforce.ibmcl
s: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199322
CVE ID: CVE-2021-20509 State: PUBLISHED Published: 2021-08-12T16:05:10.550691Z Last Updated: 2024-09-17T03:32:23.470Z Severity: HIGH (CVSS 7 CVSS:3.0/I:H/AC:H/S:U/A:H/UI:R/AV:L/PR:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6480377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198243
CVE ID: CVE-2021-20510 State: PUBLISHED Published: 2021-07-15T17:15:55.220846Z Last Updated: 2024-09-16T19:20:27.926Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/I:N/S:C/C:H/UI:N/PR:H/A:N/AV:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 198299 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198299
CVE ID: CVE-2021-20511 State: PUBLISHED Published: 2021-07-15T17:15:56.769692Z Last Updated: 2024-09-17T00:20:41.657Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AC:L/A:N/AV:A/PR:H/UI:N/C:H/S:U/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 198300. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198300
CVE ID: CVE-2021-20515 State: PUBLISHED Published: 2021-04-30T15:45:15.878163Z Last Updated: 2024-09-16T18:18:52.587Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/C:H/S:U/PR:H/A:H/AV:L/UI:N/I:H/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Informix Dynamic Server Problem Types: Gain Privileges Description: IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or cause a denial of service condition. IBM X-Force ID: 198366. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6448568 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6448568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198366
CVE ID: CVE-2021-20517 State: PUBLISHED Published: 2021-06-07T14:05:14.362094Z Last Updated: 2024-09-17T02:36:50.637Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/A:L/C:L/I:H/AV:N/AC:H/S:U/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server ND Problem Types: File Manipulation Description: IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to read and delete arbitrary files on the system. IBM X-Force ID: 198435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 198435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6456955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198435
CVE ID: CVE-2021-20518 State: PUBLISHED Published: 2021-03-30T16:45:33.454159Z Last Updated: 2024-09-17T00:06:10.547Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/S:C/PR:L/I:L/UI:R/C:L/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Team Concert, Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198437
CVE ID: CVE-2021-20519 State: PUBLISHED Published: 2021-04-12T18:00:25.456334Z Last Updated: 2024-09-16T22:24:46.849Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/A:N/AC:L/S:C/AV:N/UI:R/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Rational Quality Manager, Rational Team Concert, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Engineering Test Management, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc
z Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198441
CVE ID: CVE-2021-20520 State: PUBLISHED Published: 2021-03-30T16:45:34.161318Z Last Updated: 2024-09-16T18:48:45.220Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/S:C/PR:L/I:L/C:L/UI:R/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Engineering Workflow Management, Engineering Lifecycle Optimization, Rational Team Concert, Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198572
CVE ID: CVE-2021-20523 State: PUBLISHED Published: 2021-07-15T17:15:58.446933Z Last Updated: 2024-09-17T02:52:11.941Z Severity: LOW (CVSS 2.7 CVSS:3.0/S:U/I:N/C:L/UI:N/PR:H/A:N/AV:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 198660 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198660
CVE ID: CVE-2021-20524 State: PUBLISHED Published: 2021-07-15T17:16:00.076313Z Last Updated: 2024-09-17T03:12:56.118Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/UI:R/C:L/PR:H/I:L/S:C/AV:N/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Cross-Site Scripting Description: IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 198661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198661
CVE ID: CVE-2021-20526 State: PUBLISHED Published: 2021-10-27T16:00:23.291433Z Last Updated: 2024-09-17T02:51:53.094Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/PR:N/S:U/I:N/C:L/A:N/UI:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 198755. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6507095 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6507095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198755
CVE ID: CVE-2021-20527 State: PUBLISHED Published: 2021-04-19T16:20:13.202247Z Last Updated: 2024-09-16T22:14:43.962Z Severity: MEDIUM (CVSS 6 CVSS:3.0/S:U/I:H/C:L/PR:H/A:L/AC:L/UI:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Resilient OnPrem Problem Types: Gain Privileges Description: IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6444747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198759
CVE ID: CVE-2021-20528 State: PUBLISHED Published: 2021-05-19T19:40:21.800336Z Last Updated: 2024-09-17T02:32:37.225Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/S:C/AV:N/I:L/C:L/PR:L/A:N/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: Control Center Problem Types: Cross-Site Scripting Description: IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454215 - https://ex
tional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198761
CVE ID: CVE-2021-20529 State: PUBLISHED Published: 2021-05-19T19:40:22.557866Z Last Updated: 2024-09-16T19:45:47.461Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/S:U/I:N/AV:N/C:L/PR:N/AC:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Control Center Problem Types: Obtain Information Description: IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198763
CVE ID: CVE-2021-20532 State: PUBLISHED Published: 2021-04-26T16:30:43.722353Z Last Updated: 2024-09-16T19:36:15.162Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:H/PR:N/C:H/UI:N/I:H/S:U/A:H/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect for Virtual Environments Problem Types: Gain Privileges Description: IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198811
CVE ID: CVE-2021-20533 State: PUBLISHED Published: 2021-07-15T17:16:01.680641Z Last Updated: 2024-09-16T20:01:16.057Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/S:C/UI:N/C:H/PR:H/A:H/AV:A/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Access Docker Problem Types: Gain Privileges Description: IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 198813 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198813
CVE ID: CVE-2021-20534 State: PUBLISHED Published: 2021-07-15T17:16:03.310013Z Last Updated: 2024-09-16T23:55:32.367Z Severity: MEDIUM (CVSS 4.5 CVSS:3.0/I:H/S:U/PR:H/UI:R/C:N/AV:N/A:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Docker Problem Types: Gain Access Description: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitiv
a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 198814 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198814