Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1715 State: PUBLISHED Published: 2018-08-16T13:00:00Z Last Updated: 2024-09-16T21:57:45.986Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147003. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vu
rce ID: 147003. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147003 - https://www.ibm.com/support/docview.wss?uid=swg22017453
CVE ID: CVE-2018-1716 State: PUBLISHED Published: 2018-09-27T19:00:00Z Last Updated: 2024-09-17T02:57:00.425Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147164. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041754 - http
47164. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041754 - https://www.ibm.com/support/docview.wss?uid=ibm10729323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147164
CVE ID: CVE-2018-1718 State: PUBLISHED Published: 2018-07-31T13:00:00Z Last Updated: 2024-09-16T17:57:56.491Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147166. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforc
session. IBM X-Force ID: 147166. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147166 - http://www.securityfocus.com/bid/104938 - https://www.ibm.com/support/docview.wss?uid=ibm10718863
CVE ID: CVE-2018-1719 State: PUBLISHED Published: 2018-09-14T12:00:00Z Last Updated: 2024-09-16T23:11:00.627Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS protocol. A remote attacker could exploit this vulnerability to perform man-in-the-middle attacks. IBM X-Force ID: 147292. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041718 - https://www.ibm.c
onal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041718 - https://www.ibm.com/support/docview.wss?uid=ibm10718837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147292
CVE ID: CVE-2018-1720 State: PUBLISHED Published: 2019-04-25T14:36:43.298733Z Last Updated: 2024-09-16T16:42:31.465Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/I:N/UI:N/A:N/AV:N/PR:N/S:U/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880601 - https://exchange.xforce.ibmcloud.com/vulnerabili
References: - https://www.ibm.com/support/docview.wss?uid=ibm10880601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147294
CVE ID: CVE-2018-1721 State: PUBLISHED Published: 2019-11-09T01:41:06.797474Z Last Updated: 2024-09-16T19:55:39.776Z Severity: HIGH (CVSS 8.3 CVSS:3.0/S:U/AV:N/AC:L/C:H/A:L/I:H/UI:N/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or cause the web server to make HTTP requests to arbitrary domains. IBM X-Force ID: 147369. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074144 -
47369. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147369
CVE ID: CVE-2018-1722 State: PUBLISHED Published: 2018-08-24T11:00:00Z Last Updated: 2024-09-16T22:03:37.968Z Severity: CRITICAL (CVSS 10 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Gain Access Description: IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10719623 - http://www.securitytracker.com/id/1041557 - http://www.securityfocus.com/bid/105145 - https://exchang
?uid=ibm10719623 - http://www.securitytracker.com/id/1041557 - http://www.securityfocus.com/bid/105145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147370
CVE ID: CVE-2018-1723 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-16T21:02:50.529Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147373 - https://www.ibm.com/support/docview.wss?uid=ibm10732713 - http://www.
hange.xforce.ibmcloud.com/vulnerabilities/147373 - https://www.ibm.com/support/docview.wss?uid=ibm10732713 - http://www.securityfocus.com/bid/105975
CVE ID: CVE-2018-1724 State: PUBLISHED Published: 2018-10-11T12:00:00Z Last Updated: 2024-09-17T03:32:24.654Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:L/AC:L/AV:L/C:L/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum LSF Problem Types: Gain Privileges Description: IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147439 - https://www-01.ibm.com/support/docview.wss?uid=ibm10734767 - http://www.securityfocus.com/bid/106642
CVE ID: CVE-2018-1725 State: PUBLISHED Published: 2020-11-05T16:45:15.853448Z Last Updated: 2024-09-16T16:33:38.595Z Severity: LOW (CVSS 3.2 CVSS:3.0/A:N/AV:L/I:N/S:C/PR:H/C:L/AC:L/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6359945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147440
CVE ID: CVE-2018-1727 State: PUBLISHED Published: 2019-02-15T20:00:00Z Last Updated: 2024-09-16T16:58:14.389Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10718887
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10718887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147630
CVE ID: CVE-2018-1728 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-17T01:46:10.569Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147707. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147707 - https:/
lyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147707 - https://www.ibm.com/support/docview.wss?uid=ibm10742723
CVE ID: CVE-2018-1729 State: PUBLISHED Published: 2019-04-19T16:20:15.940907Z Last Updated: 2024-09-16T22:45:18.208Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/PR:N/AC:L/I:N/C:L/AV:N/A:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147708. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10881546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147708 - http://www.securityfocus.com/bid/108031
CVE ID: CVE-2018-1730 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-16T18:04:10.165Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147709. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147709 - https://www.ibm.com/support/docview.wss?uid=
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147709 - https://www.ibm.com/support/docview.wss?uid=ibm10742741&myns=swgother&mynp=OCSSBQAC&mync=E&cm_sp=swgother-_-OCSSBQAC-_-E
CVE ID: CVE-2018-1731 State: PUBLISHED Published: 2019-04-03T13:50:29.516594Z Last Updated: 2024-09-17T03:14:03.987Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/UI:R/PR:H/S:C/A:N/AC:L/AV:N/C:L/I:L/RL:O/RC:C/E:H) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147710. Additional Analyst Notes: - CVE Program Container: Reference
isclosure within a trusted session. IBM X-Force ID: 147710. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10793649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147710 - http://www.securityfocus.com/bid/107771
CVE ID: CVE-2018-1732 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-16T20:46:57.026Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147810. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10736009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147810
CVE ID: CVE-2018-1733 State: PUBLISHED Published: 2019-01-29T16:00:00Z Last Updated: 2024-09-16T16:52:40.585Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Data Manipulation Description: IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could allow an attacker to modify displayed content. IBM X-Force ID: 147811. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147811 - http://www.securityfocus.com/bid/106793 - https://www.ibm.com/support/docview.wss?u
bmcloud.com/vulnerabilities/147811 - http://www.securityfocus.com/bid/106793 - https://www.ibm.com/support/docview.wss?uid=ibm10794523
CVE ID: CVE-2018-1734 State: PUBLISHED Published: 2019-06-27T13:45:29.388873Z Last Updated: 2024-09-16T23:36:31.510Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/PR:L/AV:N/C:L/I:N/S:U/A:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilit
References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147838
CVE ID: CVE-2018-1736 State: PUBLISHED Published: 2018-09-27T19:00:00Z Last Updated: 2024-09-17T02:01:25.010Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Gain Access Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or con
us Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 147906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041753 - http://www.securityfocus.com/bid/105490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147906 - https://www.ibm.com/support/docview.wss?uid=ibm10729683
CVE ID: CVE-2018-1738 State: PUBLISHED Published: 2018-10-11T12:00:00Z Last Updated: 2024-09-16T17:28:49.310Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. IBM X-Force ID: 147907. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/147907
CVE ID: CVE-2018-1740 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T02:42:36.171Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Cross-Site Scripting Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148419. Additional Analyst Notes: - CVE Program Container: Ref
ials disclosure within a trusted session. IBM X-Force ID: 148419. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148419
CVE ID: CVE-2018-1741 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-16T19:15:45.234Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:L/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Denial of Service Description: IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service, compromise program logic or other consequences. IBM X-Force ID: 148420. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148420 - http://www.ibm.com/support/docview.wss?u
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148420 - http://www.ibm.com/support/docview.wss?uid=ibm10733425
CVE ID: CVE-2018-1742 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-16T19:00:25.198Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 148421. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733419 - ht
tional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148421
CVE ID: CVE-2018-1743 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-16T19:19:08.883Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 148422. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148422 - http://www.ibm.com/support/docview.wss?uid=ibm10733351
CVE ID: CVE-2018-1744 State: PUBLISHED Published: 2018-10-15T13:00:00Z Last Updated: 2024-09-16T20:06:35.153Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148423. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148
dditional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148423 - https://www.ibm.com/support/docview.wss?uid=ibm10733353
CVE ID: CVE-2018-1745 State: PUBLISHED Published: 2018-10-11T12:00:00Z Last Updated: 2024-09-16T18:08:55.068Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Denial of Service Description: IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148424 - https://www.ibm.com/support/docview.wss?uid=ibm10733355
CVE ID: CVE-2018-1747 State: PUBLISHED Published: 2018-10-15T13:00:00Z Last Updated: 2024-09-17T03:03:07.047Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 148428. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733429 - https:
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148428
CVE ID: CVE-2018-1749 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-17T02:27:15.077Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Bypass Security Description: IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733303 - https://exchange.xforce.ibmcloud.com/vulner
iner: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148484
CVE ID: CVE-2018-1750 State: PUBLISHED Published: 2018-10-08T15:00:00Z Last Updated: 2024-09-16T18:39:13.671Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Security Key Lifecycle Manager 3.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 148511. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148511 - http://www.ibm.com/support/docview.wss?uid=ibm10733311