Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6110 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss
?uid=swg21689779 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96179 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6111 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T12:03:02.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 store encrypted user credentials and the keystore password in cleartext in configuration files, which allows local users to decrypt SIM credentials via unspecified vectors. IBM X-Force ID: 96180. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698020 - https://exchange.xforce.ibmcloud.com/vul
iner: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96180
CVE ID: CVE-2014-6112 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T12:03:02.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 make it easier for remote attackers to obtain sensitive information by leveraging support for weak SSL ciphers. IBM X-Force ID: 96184. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96184 - http://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE ID: CVE-2014-6113 State: PUBLISHED Published: 2015-02-16T00:00:00 Last Updated: 2024-08-06T12:03:02.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96210
CVE ID: CVE-2014-6114 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T12:03:02.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5 before FP3 IF41; and Operational Decision Manager 8.0 before MP1 FP2 IF34, 8.5 before MP1 FP1 IF43, and 8.6 before IF8 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http
ce, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96211 - http://www-01.ibm.com/support/docview.wss?uid=swg21691815
CVE ID: CVE-2014-6115 State: PUBLISHED Published: 2015-02-24T20:00:00 Last Updated: 2024-08-06T12:03:02.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service (JRS) report URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697034
CVE ID: CVE-2014-6116 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:03:02.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to bypass authentication by setting the JAASConfig property in an MQTT client configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21686210 - http://secunia.com/advisories/61064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96213
CVE ID: CVE-2014-6119 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T12:10:11.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96720 - http://www.securitytracker.com/id/1031427 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035 - http://www-01.
- http://www.securitytracker.com/id/1031427 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035 - http://www-01.ibm.com/support/docview.wss?uid=swg21693183 - http://secunia.com/advisories/62012
CVE ID: CVE-2014-6120 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T12:10:11.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96721
CVE ID: CVE-2014-6121 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T12:10:12.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031427 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035 - https://exchange.xforce.ibmcloud.c
ytracker.com/id/1031427 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96722
CVE ID: CVE-2014-6122 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T12:10:11.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary commands, via a modified argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96723 - http://www-01.ibm.com/support/docv
tracker.com/id/1031427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96723 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035
CVE ID: CVE-2014-6123 State: PUBLISHED Published: 2014-12-29T02:00:00 Last Updated: 2024-08-06T12:10:11.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96724
CVE ID: CVE-2014-6125 State: PUBLISHED Published: 2014-10-28T19:00:00 Last Updated: 2024-08-06T12:10:12.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI26889 - http://www-01.ibm.com/support/docview.wss?uid=swg21684651 - http://www.securityfocus.com/bid/70759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96782
CVE ID: CVE-2014-6126 State: PUBLISHED Published: 2014-10-28T19:00:00 Last Updated: 2024-08-06T12:10:11.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI26889 - http://www-01.ibm.com/support/docview.wss?uid=swg21684651 - http://www.securityfocus.com/bid/70756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96783
CVE ID: CVE-2014-6129 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T12:10:11.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other produ
4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to delete the dashboards of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698247
CVE ID: CVE-2014-6130 State: PUBLISHED Published: 2014-11-04T18:00:00 Last Updated: 2024-08-06T12:10:11.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which the user had intended to use HTTPS. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21688840 - http://www.securityfocus.com/bid/70871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96810 - http://www.kb.cert.or
p://www.securityfocus.com/bid/70871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96810 - http://www.kb.cert.org/vuls/id/432608
CVE ID: CVE-2014-6131 State: PUBLISHED Published: 2015-03-18T10:00:00 Last Updated: 2024-08-06T12:10:12.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other produ
4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to read the dashboards of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698247
CVE ID: CVE-2014-6132 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/doc
rt/docview.wss?uid=swg21693389 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - http://secunia.com/advisories/61805 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96812 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64000 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6133 State: PUBLISHED Published: 2014-10-26T18:00:00 Last Updated: 2024-08-06T12:10:12.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21686801 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI78229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96813
CVE ID: CVE-2014-6134 State: PUBLISHED Published: 2015-03-25T01:00:00 Last Updated: 2024-08-06T12:10:12.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21688450
CVE ID: CVE-2014-6135 State: PUBLISHED Published: 2014-12-23T02:00:00 Last Updated: 2024-08-06T12:10:12.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031427 - http://www-01.ibm.com/support/docview.wss?uid=swg21693035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96815
CVE ID: CVE-2014-6136 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T12:10:12.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21695170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96816
CVE ID: CVE-2014-6137 State: PUBLISHED Published: 2015-02-16T00:00:00 Last Updated: 2024-08-06T12:10:12.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96817 - http://www-01.ibm.com/support/docview.wss?uid=swg21692516 - http://www.securityfocus.com/bid/72559
CVE ID: CVE-2014-6138 State: PUBLISHED Published: 2014-12-12T11:00:00 Last Updated: 2024-08-06T12:10:12.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21691035 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96852
CVE ID: CVE-2014-6139 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T12:10:12.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51391
CVE ID: CVE-2014-6140 State: PUBLISHED Published: 2014-12-06T15:00:00 Last Updated: 2024-08-06T12:10:12.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to (1) Enrollment and Apple iOS Management Extender, (2) Self-service portal, (3) Trusted Services provider, or (4) Admin Portal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031306 - http://www.securityfocus.com/bid/71424
CVE Program Container: References: - http://www.securitytracker.com/id/1031306 - http://www.securityfocus.com/bid/71424 - http://packetstormsecurity.com/files/129349/IBM-Endpoint-Manager-For-Mobile-Devices-Code-Execution.html - http://www.securityfocus.com/archive/1/534131/100/0/threaded - http://seclists.org/fulldisclosure/2014/Dec/3 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-012/-unauthenticated-remote-code-execution-in-ibm-endpoint-manager-mobile-device-management-components - http://www-01.ibm.com/support/docview.wss?uid=swg21691701
CVE ID: CVE-2014-6141 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T12:10:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96911
CVE ID: CVE-2014-6143 State: PUBLISHED Published: 2014-12-11T16:00:00 Last Updated: 2024-08-06T12:10:12.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96913 - http://www-01.ibm.com/support/docview.wss?uid=swg21691035 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04614
CVE ID: CVE-2014-6144 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T12:10:12.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698361 - http://www.securitytracker.com/id/1031885
CVE ID: CVE-2014-6145 State: PUBLISHED Published: 2014-12-12T11:00:00 Last Updated: 2024-08-06T12:10:12.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96915
CVE ID: CVE-2014-6146 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T12:10:12.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62190 - http://www-01.ibm.com/support/docview.wss?uid=swg21689082 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96916
CVE ID: CVE-2014-6147 State: PUBLISHED Published: 2015-02-19T02:00:00 Last Updated: 2024-08-06T12:10:12.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96917 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05310 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5097120
CVE ID: CVE-2014-6148 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T12:10:12.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21688549 - http://secunia.com/advisories/61785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96918 - http:/
=swg21688549 - http://secunia.com/advisories/61785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96918 - http://www.securityfocus.com/bid/70842