Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20414 State: PUBLISHED Published: 2021-07-12T16:05:27.698591Z Last Updated: 2024-09-17T02:16:09.779Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/PR:H/I:N/C:H/AV:N/AC:H/S:U/UI:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6470849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196216
CVE ID: CVE-2021-20415 State: PUBLISHED Published: 2021-07-07T16:30:30.260817Z Last Updated: 2024-09-17T02:10:33.899Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AV:N/PR:N/AC:H/S:U/C:H/I:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196217
CVE ID: CVE-2021-20416 State: PUBLISHED Published: 2021-07-07T16:30:31.877815Z Last Updated: 2024-09-16T18:43:51.184Z Severity: LOW (CVSS 3.7 CVSS:3.0/S:U/AC:H/PR:N/AV:N/A:N/UI:N/I:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469407 -
96218. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196218
CVE ID: CVE-2021-20417 State: PUBLISHED Published: 2021-07-07T16:30:33.464684Z Last Updated: 2024-09-16T16:28:51.848Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/I:N/C:L/S:U/AC:L/PR:L/AV:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196219 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469691 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196219
CVE ID: CVE-2021-20418 State: PUBLISHED Published: 2021-08-11T15:55:16.020025Z Last Updated: 2024-09-16T17:27:50.538Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/A:N/I:N/PR:N/AV:N/AC:L/C:L/S:C/UI:R/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196279. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196279
CVE ID: CVE-2021-20419 State: PUBLISHED Published: 2021-05-24T13:55:39.902006Z Last Updated: 2024-09-16T17:49:02.842Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:C/I:N/AC:H/A:N/AV:N/PR:N/UI:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196280
CVE ID: CVE-2021-20420 State: PUBLISHED Published: 2021-08-11T15:55:17.647404Z Last Updated: 2024-09-17T03:38:18.662Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/I:N/A:N/AV:N/AC:L/S:U/C:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks against the system. IBM X-Force ID: 196281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196281
CVE ID: CVE-2021-20421 State: PUBLISHED Published: 2022-06-24T16:15:33.782363Z Last Updated: 2024-09-16T21:08:00.200Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/S:U/AC:L/A:N/PR:L/UI:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Jazz Team Server Problem Types: Gain Access Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597507 - https://exchange.xforce.ibm
tes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196300
CVE ID: CVE-2021-20422 State: PUBLISHED Published: 2021-07-13T16:10:46.530347Z Last Updated: 2024-09-16T20:46:56.018Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:N/AC:L/A:N/UI:N/PR:N/C:H/AV:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Obtain Information Description: IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. IBM X-Force ID: 196304. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196304
CVE ID: CVE-2021-20423 State: PUBLISHED Published: 2021-07-13T16:10:48.090756Z Last Updated: 2024-09-16T18:49:16.171Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/I:H/UI:N/PR:L/C:H/AV:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Gain Privileges Description: IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions. IBM X-Force ID: 196308. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196308
CVE ID: CVE-2021-20424 State: PUBLISHED Published: 2021-07-13T16:10:49.635914Z Last Updated: 2024-09-17T03:32:29.616Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/I:N/A:N/PR:L/UI:N/AV:N/C:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Applications Problem Types: Obtain Information Description: IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471325 - https://exchange.xforce.ibmcl
s: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196309
CVE ID: CVE-2021-20426 State: PUBLISHED Published: 2021-05-24T13:55:40.552828Z Last Updated: 2024-09-16T16:58:49.386Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/S:U/AC:H/A:N/C:H/UI:N/AV:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196313
CVE ID: CVE-2021-20427 State: PUBLISHED Published: 2021-08-11T15:55:19.226282Z Last Updated: 2024-09-17T04:04:48.096Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/I:N/PR:N/A:N/UI:N/S:U/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196314. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196314
CVE ID: CVE-2021-20428 State: PUBLISHED Published: 2021-05-24T13:55:41.184764Z Last Updated: 2024-09-16T20:26:30.988Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/I:N/AC:L/A:N/UI:N/C:L/PR:N/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196315
CVE ID: CVE-2021-20429 State: PUBLISHED Published: 2021-05-14T16:15:37.361751Z Last Updated: 2024-09-16T18:23:33.084Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/A:N/AV:N/S:U/PR:N/AC:H/I:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196334
CVE ID: CVE-2021-20430 State: PUBLISHED Published: 2021-07-26T12:10:36.014436Z Last Updated: 2024-09-16T20:02:56.374Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/I:N/C:L/AC:L/UI:N/AV:N/PR:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: i2 Analyze Problem Types: Obtain Information Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474861 - h
341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196341
CVE ID: CVE-2021-20431 State: PUBLISHED Published: 2021-07-26T12:10:37.587291Z Last Updated: 2024-09-16T23:22:05.232Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/A:N/AV:N/UI:R/C:L/AC:L/PR:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: i2 Analyst's Notebook Premium Problem Types: Obtain Information Description: IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196342
CVE ID: CVE-2021-20432 State: PUBLISHED Published: 2021-04-26T16:30:43.094832Z Last Updated: 2024-09-16T16:18:23.973Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/UI:N/I:L/S:U/A:N/C:L/PR:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 196344. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445733 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196344
CVE ID: CVE-2021-20433 State: PUBLISHED Published: 2021-09-15T17:55:15.650521Z Last Updated: 2024-09-17T04:14:31.342Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/I:N/AV:N/C:H/PR:L/UI:N/A:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 196345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196345
CVE ID: CVE-2021-20434 State: PUBLISHED Published: 2021-09-23T17:10:30.776946Z Last Updated: 2024-09-17T01:15:41.927Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/PR:H/AV:L/S:U/UI:N/C:H/I:N/A:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196346
CVE ID: CVE-2021-20435 State: PUBLISHED Published: 2021-09-23T17:10:32.332316Z Last Updated: 2024-09-16T18:38:59.408Z Severity: LOW (CVSS 2.5 CVSS:3.0/S:U/AV:L/PR:L/AC:H/A:N/C:L/UI:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196355
CVE ID: CVE-2021-20439 State: PUBLISHED Published: 2021-07-15T16:00:16.215865Z Last Updated: 2024-09-16T20:06:17.598Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/PR:N/AC:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Docker, Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196453
CVE ID: CVE-2021-20440 State: PUBLISHED Published: 2021-03-15T15:30:17.410802Z Last Updated: 2024-09-16T20:01:51.745Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/PR:L/A:L/C:H/AC:H/S:U/I:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider organization. IBM X-Force ID: 196536. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
zation. IBM X-Force ID: 196536. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6430107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196536
CVE ID: CVE-2021-20441 State: PUBLISHED Published: 2021-03-03T17:00:22.155027Z Last Updated: 2024-09-16T18:39:17.726Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/AC:H/C:H/PR:N/AV:N/S:U/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196617. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6421023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196617
CVE ID: CVE-2021-20442 State: PUBLISHED Published: 2021-03-03T17:00:23.245788Z Last Updated: 2024-09-16T23:25:33.397Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/A:N/S:U/I:N/UI:N/AC:H/PR:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6421025 - https://exchange.xforce.ibmcloud.c
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6421025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196618
CVE ID: CVE-2021-20443 State: PUBLISHED Published: 2021-02-18T15:10:45.696659Z Last Updated: 2024-09-16T21:03:30.817Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/AC:L/A:L/AV:N/UI:N/I:L/C:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Maximo for Civil Infrastructure Problem Types: Gain Privileges Description: IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196619
CVE ID: CVE-2021-20444 State: PUBLISHED Published: 2021-02-18T15:10:46.332260Z Last Updated: 2024-09-16T17:23:34.930Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AV:N/AC:L/PR:N/I:L/UI:R/C:L/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Maximo for Civil Infrastructure Problem Types: Cross-Site Scripting Description: IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196620. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 196620. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196620
CVE ID: CVE-2021-20445 State: PUBLISHED Published: 2021-02-18T15:10:46.975937Z Last Updated: 2024-09-17T03:07:32.034Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/C:H/I:N/UI:N/A:N/AV:N/AC:L/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Maximo for Civil Infrastructure Problem Types: Obtain Information Description: IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196621
CVE ID: CVE-2021-20446 State: PUBLISHED Published: 2021-02-18T15:10:47.633098Z Last Updated: 2024-09-16T19:05:22.193Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/C:L/UI:R/I:L/AC:L/PR:L/AV:N/A:N/RL:O/RC:C/E:H) Vendors: IBM Products: Maximo for Civil Infrastructure Problem Types: Cross-Site Scripting Description: IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 196622. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6415893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196622
CVE ID: CVE-2021-20447 State: PUBLISHED Published: 2021-03-30T16:45:30.002231Z Last Updated: 2024-09-16T22:40:57.198Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/UI:R/AV:N/I:L/S:C/PR:L/A:N/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Rational Engineering Lifecycle Manager, Rational Team Concert, Engineering Workflow Management, Engineering Lifecycle Optimization Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623. Addit
nded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196623
CVE ID: CVE-2021-20448 State: PUBLISHED Published: 2021-04-27T16:32:50.481521Z Last Updated: 2024-09-16T23:31:16.326Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AC:L/S:C/AV:N/UI:R/A:N/C:L/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447139 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196624
CVE ID: CVE-2021-20450 State: PUBLISHED Published: 2024-05-03T16:55:57.932Z Last Updated: 2024-12-05T20:36:10.987Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Controller Problem Types: 614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traf
to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 196640. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196640