Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4224 State: PUBLISHED Published: 2020-02-03T16:45:18.722259Z Last Updated: 2024-09-17T04:20:12.867Z Severity: LOW (CVSS 2.9 CVSS:3.0/UI:N/A:N/S:U/C:L/I:N/PR:N/AC:H/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: StoredIQ Problem Types: Obtain Information Description: IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175133
CVE ID: CVE-2020-4226 State: PUBLISHED Published: 2020-05-27T13:15:27.868022Z Last Updated: 2024-09-17T03:59:15.528Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/A:N/I:N/C:H/AV:N/S:U/AC:H/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: MobileFirst Platform Foundation Problem Types: Obtain Information Description: IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6216813 - https://exchange
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6216813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175207
CVE ID: CVE-2020-4229 State: PUBLISHED Published: 2020-06-05T12:55:17.247753Z Last Updated: 2024-09-16T23:46:17.673Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:N/C:L/PR:N/AC:H/UI:N/A:L/I:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: MobileFirst Platform Foundation Problem Types: Gain Privileges Description: IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175211
CVE ID: CVE-2020-4230 State: PUBLISHED Published: 2020-02-19T15:15:47.143826Z Last Updated: 2024-09-16T19:31:38.994Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/I:H/AV:L/C:H/AC:L/S:U/UI:N/PR:H/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2878809 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/2878809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175212
CVE ID: CVE-2020-4231 State: PUBLISHED Published: 2020-05-28T14:45:34.743737Z Last Updated: 2024-09-16T20:58:54.064Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/UI:N/PR:L/I:L/AV:N/C:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Bypass Security Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous input validation. IBM X-Force ID: 175335. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175335
CVE ID: CVE-2020-4232 State: PUBLISHED Published: 2020-05-28T14:45:35.190882Z Last Updated: 2024-09-16T20:02:15.381Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/A:N/AC:L/AV:N/C:L/S:U/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207906 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/6207906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175336
CVE ID: CVE-2020-4233 State: PUBLISHED Published: 2020-05-28T14:45:35.802426Z Last Updated: 2024-09-17T02:41:57.232Z Severity: LOW (CVSS 3.7 CVSS:3.0/PR:N/UI:N/A:N/AC:H/S:U/AV:N/C:L/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360. A
acker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175360
CVE ID: CVE-2020-4235 State: PUBLISHED Published: 2020-03-31T14:31:32.193026Z Last Updated: 2024-09-16T19:09:15.086Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/S:C/C:L/AC:L/PR:L/A:N/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 175408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175408
CVE ID: CVE-2020-4236 State: PUBLISHED Published: 2020-03-31T14:31:35.318540Z Last Updated: 2024-09-16T20:36:26.391Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/UI:N/I:N/PR:L/A:H/AV:N/AC:L/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Denial of Service Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175409
CVE ID: CVE-2020-4237 State: PUBLISHED Published: 2020-03-31T14:31:39.725996Z Last Updated: 2024-09-16T23:21:27.902Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/I:L/S:U/AV:N/A:N/PR:N/C:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Gain Access Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175410. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6128943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175410
CVE ID: CVE-2020-4238 State: PUBLISHED Published: 2020-03-31T14:31:42.830320Z Last Updated: 2024-09-16T17:38:46.835Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/C:N/PR:N/A:N/AV:N/S:U/UI:R/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Gain Access Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175411. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6128949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175411
CVE ID: CVE-2020-4239 State: PUBLISHED Published: 2020-03-31T14:31:45.875461Z Last Updated: 2024-09-17T01:30:53.294Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/I:N/UI:N/C:L/AC:L/A:N/PR:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Obtain Information Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175412. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128955 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6128955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175412
CVE ID: CVE-2020-4240 State: PUBLISHED Published: 2020-03-31T14:31:48.726128Z Last Updated: 2024-09-16T18:39:50.037Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/I:L/UI:N/S:U/AC:H/C:N/A:L/AV:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Denial of Service Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6116488 - https://exchange.xforce.ibmcloud.com/vuln
gram Container: References: - https://www.ibm.com/support/pages/node/6116488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175417
CVE ID: CVE-2020-4241 State: PUBLISHED Published: 2020-03-31T14:31:51.851113Z Last Updated: 2024-09-16T19:10:59.766Z Severity: HIGH (CVSS 7.5 CVSS:3.0/UI:N/I:H/S:U/A:H/AV:N/PR:L/AC:H/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175418. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 175418. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175418
CVE ID: CVE-2020-4242 State: PUBLISHED Published: 2020-03-31T14:31:54.455271Z Last Updated: 2024-09-16T20:58:12.688Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AV:N/PR:L/AC:L/C:H/UI:N/I:H/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 175419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6114130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175419
CVE ID: CVE-2020-4243 State: PUBLISHED Published: 2020-08-05T13:15:16.738166Z Last Updated: 2024-09-16T17:03:38.588Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/S:U/I:N/PR:N/AV:N/C:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information using man in the middle techniques due to not properly invalidating session tokens. IBM X-Force ID: 175420. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255972 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175420
CVE ID: CVE-2020-4244 State: PUBLISHED Published: 2020-05-28T14:45:36.299923Z Last Updated: 2024-09-17T04:04:14.698Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/C:L/AV:N/S:U/AC:L/A:N/PR:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumeration. IBM X-Force ID: 175422. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175422
CVE ID: CVE-2020-4245 State: PUBLISHED Published: 2020-05-28T14:45:36.788480Z Last Updated: 2024-09-16T20:12:15.903Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/A:N/PR:N/UI:N/I:N/S:U/C:H/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 175423. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207908 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6207908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175423
CVE ID: CVE-2020-4246 State: PUBLISHED Published: 2020-05-28T14:45:37.227215Z Last Updated: 2024-09-17T03:08:01.976Z Severity: HIGH (CVSS 7.1 CVSS:3.0/PR:L/UI:N/AC:L/A:L/C:H/AV:N/S:U/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/no
-Force ID: 175481. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175481
CVE ID: CVE-2020-4248 State: PUBLISHED Published: 2020-05-28T15:25:12.393984Z Last Updated: 2024-09-16T17:59:26.040Z Severity: LOW (CVSS 2.7 CVSS:3.0/C:L/A:N/I:N/AC:L/UI:N/S:U/PR:H/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 175484. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175484
CVE ID: CVE-2020-4249 State: PUBLISHED Published: 2020-05-28T14:45:37.718224Z Last Updated: 2024-09-17T03:12:45.400Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:N/S:U/C:H/AV:N/AC:L/A:N/PR:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6207911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175485
CVE ID: CVE-2020-4251 State: PUBLISHED Published: 2020-06-12T13:10:12.476809Z Last Updated: 2024-09-17T02:05:40.839Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/C:L/A:N/S:C/I:L/UI:R/AV:N/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175489. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209125 - h
489. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175489
CVE ID: CVE-2020-4252 State: PUBLISHED Published: 2020-04-08T14:05:44.555960Z Last Updated: 2024-09-16T17:43:11.710Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/C:L/S:C/AV:N/A:N/UI:R/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175490. Additional Analyst Notes: - CVE Program Container: References: - https://ww
n a trusted session. IBM X-Force ID: 175490. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175490
CVE ID: CVE-2020-4253 State: PUBLISHED Published: 2020-03-24T15:20:22.851133Z Last Updated: 2024-09-16T17:17:50.113Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/AC:L/A:L/AV:N/S:U/UI:N/C:L/I:L/RL:O/RC:C/E:U) Vendors: IBM Products: Content Navigator Problem Types: Bypass Security Description: IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6116020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175559
CVE ID: CVE-2020-4254 State: PUBLISHED Published: 2020-10-16T16:40:18.428894Z Last Updated: 2024-09-17T04:19:02.645Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/A:N/AV:N/C:H/I:N/AC:H/PR:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6348664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175560
CVE ID: CVE-2020-4257 State: PUBLISHED Published: 2020-05-14T15:50:38.980261Z Last Updated: 2024-09-17T00:46:25.938Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/UI:R/S:U/C:H/PR:N/A:H/AC:L/I:H/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175635. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175635. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175635
CVE ID: CVE-2020-4258 State: PUBLISHED Published: 2020-05-14T15:50:39.416034Z Last Updated: 2024-09-17T00:20:52.118Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/C:H/PR:N/A:H/AV:L/UI:R/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175637. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175637. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175637
CVE ID: CVE-2020-4259 State: PUBLISHED Published: 2020-05-14T15:50:39.915237Z Last Updated: 2024-09-16T16:14:19.525Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/UI:N/S:U/C:N/PR:L/A:N/AC:L/I:H/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Bypass Security Description: IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175638
CVE ID: CVE-2020-4260 State: PUBLISHED Published: 2020-04-16T15:35:21.226960Z Last Updated: 2024-09-16T19:25:25.310Z Severity: LOW (CVSS 3.1 CVSS:3.0/UI:N/PR:L/A:N/I:N/AC:H/AV:N/C:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive information via generic processes. IBM X-Force ID: 175639. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6191655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175639
CVE ID: CVE-2020-4261 State: PUBLISHED Published: 2020-05-14T15:50:40.360545Z Last Updated: 2024-09-16T18:45:23.652Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/PR:N/C:H/A:H/AV:L/UI:R/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175644. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175644. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175644