Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1373 State: PUBLISHED Published: 2018-03-02T17:00:00Z Last Updated: 2024-09-17T01:10:50.036Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 137773. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137773 - http://www.securitytracker.com/id/1040453 - http://www.ibm.com/support/docview.wss?uid=
oud.com/vulnerabilities/137773 - http://www.securitytracker.com/id/1040453 - http://www.ibm.com/support/docview.wss?uid=swg22013750 - http://www.securityfocus.com/bid/103199
CVE ID: CVE-2018-1374 State: PUBLISHED Published: 2018-06-26T20:00:00Z Last Updated: 2024-09-16T18:29:16.726Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere MQ Problem Types: Denial of Service Description: An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. IBM X-Force ID: 137775. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg22012982 - https://exchange.xforce.ibmcloud.com/vulnerab
References: - http://www-01.ibm.com/support/docview.wss?uid=swg22012982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137775
CVE ID: CVE-2018-1375 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-16T17:18:02.399Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vu
rce ID: 137776. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137776 - http://www.ibm.com/support/docview.wss?uid=swg22016513
CVE ID: CVE-2018-1376 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-17T02:27:18.217Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Cross-Site Scripting Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137777. Additional Analyst Notes: - CVE Program Container: References: - https://exch
a trusted session. IBM X-Force ID: 137777. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137777 - http://www.ibm.com/support/docview.wss?uid=swg22016512
CVE ID: CVE-2018-1377 State: PUBLISHED Published: 2018-02-26T14:00:00Z Last Updated: 2024-09-16T18:08:32.142Z Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 137778. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137778 - http://www.ibm.com/support/docview.wss?uid=swg22013596 - http://www.securityfocus.com/bid/103213
CVE ID: CVE-2018-1380 State: PUBLISHED Published: 2018-10-29T15:00:00Z Last Updated: 2024-09-17T04:20:20.763Z Severity: LOW (CVSS 2.7 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Master Data Management Collaboration Server Problem Types: Obtain Information Description: IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138077 - https://www.ibm.c
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138077 - https://www.ibm.com/support/docview.wss?uid=ibm10735411
CVE ID: CVE-2018-1382 State: PUBLISHED Published: 2018-02-07T17:00:00Z Last Updated: 2024-09-17T01:01:52.633Z Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138079 - http://www.ibm.com/support/docview.wss?uid=swg22013054
CVE ID: CVE-2018-1383 State: PUBLISHED Published: 2018-02-13T20:00:00Z Last Updated: 2024-09-17T03:48:30.467Z Vendors: IBM Products: AIX Problem Types: Gain Access Description: A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102989 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1026948 - http://aix.software.ibm.com/aix/efixes/security/aixbase_advisory.asc - http://www.securitytracker.com/id/1040358 - https://exchange.xforce.ibmcloud.
aix/efixes/security/aixbase_advisory.asc - http://www.securitytracker.com/id/1040358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138117
CVE ID: CVE-2018-1384 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-16T21:07:34.714Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: Business Process Manager Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012604 - http://w
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012604 - http://www.securitytracker.com/id/1040624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138135 - http://www.securityfocus.com/bid/103681
CVE ID: CVE-2018-1386 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-16T23:57:00.709Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N) Vendors: IBM Products: Workload Scheduler Problem Types: Gain Privileges Description: IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138208
CVE ID: CVE-2018-1387 State: PUBLISHED Published: 2018-03-08T16:00:00Z Last Updated: 2024-09-17T00:45:49.386Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Monitoring Problem Types: Obtain Information Description: IBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138210 - http://www.securityfocus.com/b
cview.wss?uid=swg22014035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138210 - http://www.securityfocus.com/bid/103403
CVE ID: CVE-2018-1388 State: PUBLISHED Published: 2018-02-07T17:00:00Z Last Updated: 2024-09-17T03:23:03.234Z Vendors: IBM Products: WebSphere MQ Problem Types: Obtain Information Description: GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103698 - http://www.ibm.com/support/docview.wss?uid=swg22013022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138212
CVE ID: CVE-2018-1389 State: PUBLISHED Published: 2018-04-30T14:00:00Z Last Updated: 2024-09-17T04:09:44.989Z Vendors: IBM Products: API Connect Problem Types: Data Manipulation Description: IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138213 - http://www.securityfocus.com/bid/104026 - http://www.ibm.com/support/docview.wss?uid=swg22013531
CVE ID: CVE-2018-1390 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-16T18:55:18.191Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: Financial Transaction Manager Problem Types: Cross-Site Scripting Description: IBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138221. Additional Analyst Notes: - CVE Program Container: References:
closure within a trusted session. IBM X-Force ID: 138221. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138221 - http://www.ibm.com/support/docview.wss?uid=swg22014795
CVE ID: CVE-2018-1391 State: PUBLISHED Published: 2018-02-22T19:00:00Z Last Updated: 2024-09-16T22:14:33.369Z Vendors: IBM Products: Financial Transaction Manager Problem Types: Denial of Service Description: IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103352 - http://www.ibm.com/support/docview.wss?uid=swg22013247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138376
CVE ID: CVE-2018-1392 State: PUBLISHED Published: 2018-02-22T19:00:00Z Last Updated: 2024-09-17T04:20:06.629Z Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138377. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138377 - http://www.ibm.com/support/docview.wss?uid=swg22013249
CVE ID: CVE-2018-1393 State: PUBLISHED Published: 2018-06-13T14:00:00Z Last Updated: 2024-09-16T23:21:34.674Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138378 - http://w
www.ibm.com/support/docview.wss?uid=swg22013250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138378 - http://www.securityfocus.com/bid/104466
CVE ID: CVE-2018-1394 State: PUBLISHED Published: 2018-08-20T21:00:00Z Last Updated: 2024-09-16T20:06:15.680Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation, Rational Rhapsody Design Manager, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, Rational Quality Manager, Rational Team Concert Problem Types: Cross-Site Scripting Description: Multiple IBM Rational products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona
g. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138425. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138425 - https://www.ibm.com/support/docview.wss?uid=ibm10713739
CVE ID: CVE-2018-1395 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T19:31:00.900Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138427. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 138427. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138427 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1396 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-16T23:15:37.778Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138429. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm
trusted session. IBM X-Force ID: 138429. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10716607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138429
CVE ID: CVE-2018-1398 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-16T21:07:58.054Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information. IBM X-Force ID: 138434. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10717025 - http://www.securityfocus.com/bid/104919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138434
CVE ID: CVE-2018-1399 State: PUBLISHED Published: 2018-02-27T17:00:00Z Last Updated: 2024-09-16T23:35:28.596Z Vendors: IBM Products: Daeja ViewONE Problem Types: Cross-Site Scripting Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138435. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138435 - http://www.securityfocus.com/bid/103223 - http://www.ib
- https://exchange.xforce.ibmcloud.com/vulnerabilities/138435 - http://www.securityfocus.com/bid/103223 - http://www.ibm.com/support/docview.wss?uid=swg22013094
CVE ID: CVE-2018-1401 State: PUBLISHED Published: 2018-02-09T17:00:00Z Last Updated: 2024-09-17T04:09:49.249Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138437. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138437 - http://www.securitytracker.com/id/1040331 - http://www.securityfocus.com/bid/1
rce.ibmcloud.com/vulnerabilities/138437 - http://www.securitytracker.com/id/1040331 - http://www.securityfocus.com/bid/102973 - https://www.ibm.com/support/docview.wss?uid=swg22013097
CVE ID: CVE-2018-1403 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T22:46:03.837Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138439. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 138439. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138439 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1404 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T19:05:31.718Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138440. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 138440. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138440
CVE ID: CVE-2018-1405 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-17T02:37:37.086Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138441. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 138441. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138441 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1407 State: PUBLISHED Published: 2018-07-10T15:00:00Z Last Updated: 2024-09-17T03:33:05.708Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138445. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfo
d session. IBM X-Force ID: 138445. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138445 - https://www.ibm.com/support/docview.wss?uid=ibm10716507
CVE ID: CVE-2018-1408 State: PUBLISHED Published: 2018-07-10T15:00:00Z Last Updated: 2024-09-16T19:56:49.896Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138446. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfo
d session. IBM X-Force ID: 138446. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/138446 - https://www.ibm.com/support/docview.wss?uid=ibm10716507
CVE ID: CVE-2018-1409 State: PUBLISHED Published: 2018-02-19T14:00:00Z Last Updated: 2024-09-16T19:20:33.962Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138708 - http://www.ibm.com/
/support/docview.wss?uid=swg22010766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/138708 - http://www.ibm.com/support/docview.wss?uid=swg22010767