Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4546 State: PUBLISHED Published: 2019-10-28T23:36:11.682935Z Last Updated: 2024-09-16T20:22:02.893Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/S:U/AC:L/A:N/UI:N/C:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Health- Safety and Environment Manager Problem Types: Gain Privileges Description: After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1087738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165948
CVE ID: CVE-2019-4547 State: PUBLISHED Published: 2020-10-29T15:50:31.919460Z Last Updated: 2024-09-17T03:48:21.177Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/AC:L/A:N/UI:N/S:U/I:N/AV:N/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 165949. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165949
CVE ID: CVE-2019-4548 State: PUBLISHED Published: 2020-02-04T16:45:35.465835Z Last Updated: 2024-09-16T22:51:24.581Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/S:C/UI:R/C:L/A:N/I:L/AC:L/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Directory Server Problem Types: Gain Access Description: IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 165950. Additional Analyst Notes: - CVE Program Container: References: - https://w
s against the victim. IBM X-Force ID: 165950. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165950
CVE ID: CVE-2019-4549 State: PUBLISHED Published: 2019-10-02T14:45:30.435064Z Last Updated: 2024-09-16T22:36:36.724Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/AC:L/S:U/C:L/AV:N/I:N/PR:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165951
CVE ID: CVE-2019-4550 State: PUBLISHED Published: 2020-02-04T16:45:35.901052Z Last Updated: 2024-09-17T00:40:54.061Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/UI:N/PR:N/S:U/AV:N/AC:L/I:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165952
CVE ID: CVE-2019-4551 State: PUBLISHED Published: 2020-02-04T16:45:36.361976Z Last Updated: 2024-09-16T23:46:52.622Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/UI:N/PR:N/S:U/AV:N/AC:L/A:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165953
CVE ID: CVE-2019-4552 State: PUBLISHED Published: 2020-10-15T12:40:20.849636Z Last Updated: 2024-09-16T19:25:59.758Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/C:L/PR:N/A:N/S:C/I:L/UI:R/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Access, Security Access Manager Problem Types: Gain Access Description: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, a
clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 165960. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6348046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165960
CVE ID: CVE-2019-4553 State: PUBLISHED Published: 2020-03-24T15:20:21.956815Z Last Updated: 2024-09-17T02:06:54.512Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/AC:H/AV:N/A:N/S:U/UI:N/C:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165958. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5693588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165958
CVE ID: CVE-2019-4555 State: PUBLISHED Published: 2019-12-20T16:25:25.449663Z Last Updated: 2024-09-16T23:30:25.185Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/I:L/S:C/C:L/UI:R/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166204. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1138588 - h
204. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1138588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166204 - https://security.netapp.com/advisory/ntap-20200103-0003/
CVE ID: CVE-2019-4556 State: PUBLISHED Published: 2019-11-09T01:41:10.691984Z Last Updated: 2024-09-16T23:25:47.198Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/S:U/A:N/C:N/I:L/UI:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Qradar Advisor Problem Types: Gain Access Description: IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1102443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166205
CVE ID: CVE-2019-4557 State: PUBLISHED Published: 2020-02-25T13:55:18.036381Z Last Updated: 2024-09-16T20:28:10.005Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/AV:N/UI:N/I:N/A:N/PR:N/C:H/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Qradar Advisor Problem Types: Obtain Information Description: IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3379947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166206
CVE ID: CVE-2019-4558 State: PUBLISHED Published: 2019-10-09T15:00:24.669635Z Last Updated: 2024-09-16T18:18:55.860Z Severity: HIGH (CVSS 8.1 CVSS:3.0/PR:N/AC:H/A:H/I:H/S:U/C:H/UI:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Privileges Description: A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073732 - https://exchange.xforce.ibmcloud.com/vulner
am Container: References: - https://www.ibm.com/support/pages/node/1073732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166282
CVE ID: CVE-2019-4559 State: PUBLISHED Published: 2020-01-10T15:35:15.104439Z Last Updated: 2024-09-16T17:53:12.489Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/C:L/AC:L/UI:N/AV:N/PR:N/S:U/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 166355. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1170346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166355
CVE ID: CVE-2019-4560 State: PUBLISHED Published: 2019-12-16T15:45:16.251276Z Last Updated: 2024-09-16T18:44:07.513Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:N/AC:H/S:U/UI:N/AV:N/PR:L/A:H/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1106037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166357
CVE ID: CVE-2019-4561 State: PUBLISHED Published: 2019-11-20T16:16:11.703644Z Last Updated: 2024-09-16T19:46:20.489Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:L/UI:R/I:H/AV:N/A:H/S:U/PR:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 166456. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
the system. IBM X-Force ID: 166456. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1108695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166456
CVE ID: CVE-2019-4562 State: PUBLISHED Published: 2020-02-04T16:45:36.794608Z Last Updated: 2024-09-16T16:14:16.596Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/UI:N/PR:N/S:U/AV:N/AC:H/I:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166623
CVE ID: CVE-2019-4563 State: PUBLISHED Published: 2020-10-29T15:50:32.339921Z Last Updated: 2024-09-16T19:46:25.590Z Severity: LOW (CVSS 3.7 CVSS:3.0/I:N/AV:N/C:L/A:N/UI:N/AC:H/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 166624. Additiona
secure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 166624. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166624
CVE ID: CVE-2019-4564 State: PUBLISHED Published: 2019-10-04T14:05:21.183806Z Last Updated: 2024-09-17T01:01:32.616Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/AV:N/S:C/A:N/I:L/UI:R/AC:L/C:L/RC:C/RL:O/E:H) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/302001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166625
CVE ID: CVE-2019-4565 State: PUBLISHED Published: 2019-09-20T15:50:11.836124Z Last Updated: 2024-09-17T00:15:30.619Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/S:U/PR:N/UI:N/I:N/AC:H/C:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 166626. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-ibm-security-key-lifecycle-manager-uses-weak-password-policy-cve-2019-4
ps://www.ibm.com/support/pages/security-bulletin-ibm-security-key-lifecycle-manager-uses-weak-password-policy-cve-2019-4565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166626
CVE ID: CVE-2019-4566 State: PUBLISHED Published: 2019-09-24T13:50:14.349317Z Last Updated: 2024-09-16T17:22:48.672Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/AC:L/S:U/A:N/AV:L/PR:N/I:N/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 166627. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166627
CVE ID: CVE-2019-4568 State: PUBLISHED Published: 2020-01-28T18:30:52.103667Z Last Updated: 2024-09-17T04:13:47.232Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/A:H/C:N/AV:N/AC:H/I:N/UI:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1106517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166629
CVE ID: CVE-2019-4569 State: PUBLISHED Published: 2019-11-22T15:21:23.838540Z Last Updated: 2024-09-16T22:08:32.743Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/AV:N/PR:L/AC:L/UI:R/A:N/C:L/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166719. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 166719. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1110135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166719
CVE ID: CVE-2019-4570 State: PUBLISHED Published: 2019-11-22T15:21:24.316101Z Last Updated: 2024-09-16T22:56:49.866Z Severity: LOW (CVSS 3.7 CVSS:3.0/PR:N/AC:H/UI:N/AV:N/I:N/S:U/C:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Obtain Information Description: IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1110141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166720
CVE ID: CVE-2019-4571 State: PUBLISHED Published: 2019-09-25T20:05:27.703081Z Last Updated: 2024-09-16T16:42:42.609Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AV:N/A:N/UI:R/AC:L/PR:L/S:C/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073576 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166721
CVE ID: CVE-2019-4572 State: PUBLISHED Published: 2019-10-14T13:55:13.390910Z Last Updated: 2024-09-17T01:06:18.571Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/PR:H/I:N/S:U/AV:L/UI:N/AC:H/A:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: FileNet Content Manager Problem Types: Obtain Information Description: IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1072042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166798
CVE ID: CVE-2019-4575 State: PUBLISHED Published: 2022-06-15T15:40:13.093548Z Last Updated: 2024-09-17T03:23:39.758Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/C:N/S:U/AC:H/I:N/UI:N/AV:N/A:H/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Denial of Service Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 166801. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
d database. IBM X-Force ID: 166801. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6594797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166801
CVE ID: CVE-2019-4576 State: PUBLISHED Published: 2020-06-10T12:57:52.315703Z Last Updated: 2024-09-16T20:37:32.145Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/PR:N/AV:N/A:N/C:H/AC:H/UI:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar Network Packet Capture Software Problem Types: Obtain Information Description: IBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 166803. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221298 - https://exchange.xforce.ibmcloud.com/vulnerabi
Container: References: - https://www.ibm.com/support/pages/node/6221298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/166803
CVE ID: CVE-2019-4579 State: PUBLISHED Published: 2020-08-28T14:35:19.709596Z Last Updated: 2024-09-17T02:26:44.851Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/PR:L/AV:N/S:U/C:N/AC:L/A:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Resilient SOAR Problem Types: Gain Access Description: IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167236
CVE ID: CVE-2019-4581 State: PUBLISHED Published: 2019-11-09T01:41:11.159720Z Last Updated: 2024-09-16T19:24:12.349Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/AC:L/AV:N/A:N/C:L/I:L/UI:R/PR:N/RC:C/E:H/RL:O) Vendors: IBM Products: QRadar Problem Types: Cross-Site Scripting Description: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167239. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103373 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167239
CVE ID: CVE-2019-4582 State: PUBLISHED Published: 2020-08-13T11:50:13.464556Z Last Updated: 2024-09-16T17:43:13.114Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/A:N/S:U/UI:N/AC:L/C:L/PR:L/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 167288. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6258321 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6258321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167288
CVE ID: CVE-2019-4583 State: PUBLISHED Published: 2020-02-20T16:45:17.868567Z Last Updated: 2024-09-16T22:03:25.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/A:N/C:L/AV:N/PR:L/AC:L/S:U/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 167289. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3002121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167289