Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5940 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.550Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Cross-Site Scripting Description: IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95433
CVE ID: CVE-2016-5941 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.423Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Obtain Information Description: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95438
CVE ID: CVE-2016-5942 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.781Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Cross-Site Scripting Description: IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95440
CVE ID: CVE-2016-5943 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93084 - http://www-01.ibm.com/support/docview.wss?uid=swg21988625 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
CVE ID: CVE-2016-5944 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93087 - http://www-01.ibm.com/support/docview.wss?uid=swg21988625 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
CVE ID: CVE-2016-5945 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93082 - http://www-01.ibm.com/support/docview.wss?uid=swg21988625 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
CVE ID: CVE-2016-5946 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988625 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944 - http://www.securityfocus.com/bid/93086
CVE ID: CVE-2016-5947 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93085 - http://www-01.ibm.com/support/docview.wss?uid=swg21988625 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
CVE ID: CVE-2016-5948 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.497Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Cross-Site Scripting Description: IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992067 - http://www.securityfocus.com/bid/94388
CVE ID: CVE-2016-5949 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.710Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Obtain Information Description: IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93559 - http://www.ibm.com/support/docview.wss?uid=swg21992276
CVE ID: CVE-2016-5950 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.599Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Obtain Information Description: IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94387 - http://www.ibm.com/support/docview.wss?uid=swg21992067
CVE ID: CVE-2016-5951 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.598Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Cross-Site Scripting Description: IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94385 - http://www.ibm.com/support/docview.wss?uid=swg21992067
CVE ID: CVE-2016-5952 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.623Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Data Manipulation Description: IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21976805 - http://www.securityfocus.com/bid/93520
CVE ID: CVE-2016-5953 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.785Z Vendors: IBM Corporation Products: Sterling Order Management Problem Types: Obtain Information Description: IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21994521 - http://www.securityfocus.com/bid/95431
CVE ID: CVE-2016-5954 State: PUBLISHED Published: 2016-09-12T10:00:00 Last Updated: 2024-08-06T01:15:10.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93017 - http://www.securitytracker.com/id/1036762 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI67037 - http://www-01.ibm.com/support/docview.wss?uid=swg21989993
CVE ID: CVE-2016-5955 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93154 - http://www-01.ibm.com/support/docview.wss?uid=swg21990054
CVE ID: CVE-2016-5957 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989205 - http://www.securityfocus.com/bid/93083
CVE ID: CVE-2016-5958 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.837Z Vendors: IBM Corporation Products: Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996614 - http://www.secur
Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996614 - http://www.securityfocus.com/bid/95196
CVE ID: CVE-2016-5959 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T01:15:10.641Z Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22003092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/116136 - http://www.securityfocus.com/b
cview.wss?uid=swg22003092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/116136 - http://www.securityfocus.com/bid/98829
CVE ID: CVE-2016-5960 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T01:15:10.795Z Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 116171. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116171 - http://www.securityfocus.com/bid/98825 - http://www.ibm.com/support/docview.wss?uid=swg22003092
CVE ID: CVE-2016-5963 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989205 - http://www.securityfocus.com/bid/93076
CVE ID: CVE-2016-5964 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.781Z Vendors: IBM Corporation Products: Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94308 - http://www.ibm.com/support/docview.wss?uid=swg21994065
CVE ID: CVE-2016-5966 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.889Z Vendors: IBM Corporation Products: Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996614 - http://www.securityfocus.com/bid/95197
CVE ID: CVE-2016-5967 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990215 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI61540 - http://www.securityfocus.com/bid/93145
CVE ID: CVE-2016-5968 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 allows remote attackers to conduct SSRF attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94516 - http://www-01.ibm.com/support/docview.wss?uid=swg21989374
CVE ID: CVE-2016-5970 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93080 - http://www-01.ibm.com/support/docview.wss?uid=swg21989205
CVE ID: CVE-2016-5971 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989205 - http://www.securityfocus.com/bid/93081
CVE ID: CVE-2016-5972 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93077 - http://www-01.ibm.com/support/docview.wss?uid=swg21989205
CVE ID: CVE-2016-5974 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989205
CVE ID: CVE-2016-5975 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5978. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.co
vulnerability than CVE-2016-5978. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990216 - http://www.securityfocus.com/bid/93135
CVE ID: CVE-2016-5976 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to discover component passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93134 - http://www.securityfocus.com/bid/93136 - http://www-01.ibm.com/support/docview.wss?uid=sw
.securityfocus.com/bid/93134 - http://www.securityfocus.com/bid/93136 - http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE ID: CVE-2016-5977 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990216 - h
onal Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990216 - http://www.securityfocus.com/bid/93139
CVE ID: CVE-2016-5978 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
vulnerability than CVE-2016-5975. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93140 - http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE ID: CVE-2016-5979 State: PUBLISHED Published: 2017-05-15T21:00:00 Last Updated: 2024-08-06T01:15:10.706Z Vendors: IBM Corporation Products: Distributed Marketing Problem Types: Denial of Service Description: IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999526
CVE ID: CVE-2016-5980 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.906Z Vendors: IBM Corporation Products: TRIRIGA Application Platform Problem Types: Cross-Site Scripting Description: IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991992 - http://www.securityfocus.com/bid/93780
CVE ID: CVE-2016-5981 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94517 - http://www-01.ibm.com/support/docview.wss?uid=swg21990899
CVE ID: CVE-2016-5983 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:15:10.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21990060 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 - http://www.securityfocus.com/bid/93162