Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4588 State: PUBLISHED Published: 2021-05-26T16:20:16.443799Z Last Updated: 2024-09-16T17:33:45.584Z Severity: HIGH (CVSS 7.4 CVSS:3.0/C:H/A:H/S:U/AC:H/PR:N/I:H/UI:N/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6456029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167365 - https://security.netapp.com/advisory/nt
ges/node/6456029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167365 - https://security.netapp.com/advisory/ntap-20210629-0004/
CVE ID: CVE-2019-4589 State: PUBLISHED Published: 2020-08-03T12:35:36.526796Z Last Updated: 2024-09-17T03:42:51.815Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/PR:L/AV:N/I:L/S:U/A:N/UI:R/C:L/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Privileges Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167449
CVE ID: CVE-2019-4591 State: PUBLISHED Published: 2020-07-13T14:10:14.017544Z Last Updated: 2024-09-17T01:26:40.836Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/C:L/A:L/AC:L/I:L/AV:L/UI:N/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6245696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167451
CVE ID: CVE-2019-4592 State: PUBLISHED Published: 2020-02-13T15:40:21.327502Z Last Updated: 2024-09-17T01:01:14.787Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/AV:N/C:N/S:U/AC:L/I:N/UI:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Tivoli Monitoring Problem Types: Denial of Service Description: IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possibly leading to an effective denial of service or disabling of the monitoring server. IBM X-Force ID: 167647. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2278617 - https://exchange.xforce
t Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2278617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167647
CVE ID: CVE-2019-4593 State: PUBLISHED Published: 2020-04-15T15:13:53.712492Z Last Updated: 2024-09-16T18:38:51.136Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/AV:N/UI:N/PR:L/AC:L/I:N/A:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Qradar, QRadar Problem Types: Obtain Information Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-ForceID: 167743. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167743
CVE ID: CVE-2019-4594 State: PUBLISHED Published: 2020-04-15T15:13:54.162782Z Last Updated: 2024-09-17T02:58:20.707Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/UI:N/AC:H/PR:N/C:H/I:N/S:U/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar, Qradar Problem Types: Obtain Information Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID: 167810. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6
rceID: 167810. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167810
CVE ID: CVE-2019-4595 State: PUBLISHED Published: 2020-02-24T15:35:29.653291Z Last Updated: 2024-09-16T23:30:57.431Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:R/C:N/AV:N/I:H/AC:L/PR:L/A:N/S:C/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to o
displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 167878. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3137439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167878
CVE ID: CVE-2019-4596 State: PUBLISHED Published: 2020-02-26T15:55:23.426984Z Last Updated: 2024-09-17T03:02:15.664Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/A:N/C:L/PR:L/I:L/AV:N/S:C/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167879. Additional Analyst Notes: - CVE Program Container: References: - https://w
in a trusted session. IBM X-Force ID: 167879. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3144369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167879
CVE ID: CVE-2019-4597 State: PUBLISHED Published: 2020-02-26T15:55:23.841299Z Last Updated: 2024-09-16T16:13:12.009Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/S:U/AV:N/I:L/PR:L/C:L/A:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145401 - h
880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167880
CVE ID: CVE-2019-4598 State: PUBLISHED Published: 2020-02-26T15:55:24.265324Z Last Updated: 2024-09-17T03:52:40.862Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/S:U/AV:N/C:L/I:L/PR:L/UI:N/A:L/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167881. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145065 - h
881. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3145065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167881
CVE ID: CVE-2019-4600 State: PUBLISHED Published: 2019-10-28T23:36:12.179606Z Last Updated: 2024-09-17T00:31:07.340Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/I:N/AC:L/S:U/A:N/UI:N/C:L/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1079127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/167883
CVE ID: CVE-2019-4601 State: PUBLISHED Published: 2020-04-08T14:05:41.360368Z Last Updated: 2024-09-16T23:11:22.430Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/A:N/AC:L/UI:N/I:N/PR:L/C:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Rational Quality Manager Problem Types: Obtain Information Description: IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168294
CVE ID: CVE-2019-4602 State: PUBLISHED Published: 2020-04-08T14:05:41.794574Z Last Updated: 2024-09-16T18:13:15.260Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/C:L/PR:L/I:L/UI:R/AC:L/A:N/AV:N/RC:C/RL:O/E:H) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168293. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 168293. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168293
CVE ID: CVE-2019-4603 State: PUBLISHED Published: 2020-04-08T14:05:42.274122Z Last Updated: 2024-09-17T00:37:11.211Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/I:L/PR:L/C:N/AC:L/UI:N/AV:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Rational Quality Manager Problem Types: Data Manipulation Description: IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168295
CVE ID: CVE-2019-4606 State: PUBLISHED Published: 2019-12-12T16:30:14.954030Z Last Updated: 2024-09-16T22:20:29.235Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:H/PR:N/A:H/S:U/UI:N/I:H/AV:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 High Performance Unload load for LUW, Db2 High Performance Unload load for LUW Problem Types: Gain Privileges Description: IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 168298. Additional Analyst Notes: - CVE P
it this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 168298. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1128063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168298
CVE ID: CVE-2019-4608 State: PUBLISHED Published: 2020-03-10T11:55:15.798567Z Last Updated: 2024-09-16T17:54:17.264Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/UI:R/I:L/AC:L/AV:N/PR:L/A:N/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: Workload Scheduler Problem Types: Cross-Site Scripting Description: IBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168508. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5694189 -
8508. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5694189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168508
CVE ID: CVE-2019-4609 State: PUBLISHED Published: 2019-12-18T16:15:16.050299Z Last Updated: 2024-09-17T02:00:54.847Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/C:H/AV:N/A:N/AC:H/UI:N/PR:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 168510. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1137460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168510
CVE ID: CVE-2019-4611 State: PUBLISHED Published: 2019-12-09T22:30:24.315195Z Last Updated: 2024-09-16T18:33:37.269Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AC:L/A:N/AV:N/PR:L/S:C/I:L/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: Planning Analytics Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168519. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118565 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168519
CVE ID: CVE-2019-4612 State: PUBLISHED Published: 2019-12-09T22:30:24.784922Z Last Updated: 2024-09-16T17:15:17.474Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/S:U/UI:R/I:H/AV:N/PR:L/C:L/AC:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 168523. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118565 - https://exchange.xforce.ibmcl
s: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168523
CVE ID: CVE-2019-4613 State: PUBLISHED Published: 2020-02-05T15:20:23.970676Z Last Updated: 2024-09-16T17:33:04.222Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/I:L/AC:L/AV:N/S:U/PR:N/UI:R/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1172860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168524
CVE ID: CVE-2019-4614 State: PUBLISHED Published: 2020-01-28T18:30:52.540004Z Last Updated: 2024-09-17T04:19:34.761Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/C:N/AC:H/I:N/PR:L/UI:N/S:U/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1106523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168639
CVE ID: CVE-2019-4616 State: PUBLISHED Published: 2020-02-05T15:20:24.401096Z Last Updated: 2024-09-16T23:31:44.531Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/UI:N/PR:N/S:U/AV:A/AC:L/I:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Automation Manager Problem Types: Obtain Information Description: IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 168644. Additi
insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 168644. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1289188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168644
CVE ID: CVE-2019-4617 State: PUBLISHED Published: 2020-03-16T15:25:19.609949Z Last Updated: 2024-09-16T22:35:13.784Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:L/PR:N/AV:L/A:L/I:L/UI:N/C:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Automation Manager Problem Types: Gain Privileges Description: IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5737689 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5737689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168645
CVE ID: CVE-2019-4619 State: PUBLISHED Published: 2020-03-16T15:25:20.026505Z Last Updated: 2024-09-16T20:12:49.114Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/PR:N/AV:L/AC:H/A:N/I:N/UI:N/S:U/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 168862. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1135101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168862
CVE ID: CVE-2019-4620 State: PUBLISHED Published: 2020-01-28T18:30:53.030821Z Last Updated: 2024-09-17T03:18:41.467Z Severity: HIGH (CVSS 8.4 CVSS:3.0/S:U/A:H/I:H/AC:L/AV:L/C:H/UI:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Bypass Security Description: IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables. IBM X-Force ID: 168863. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1125891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168863
CVE ID: CVE-2019-4621 State: PUBLISHED Published: 2019-12-09T22:30:25.250401Z Last Updated: 2024-09-16T19:47:28.378Z Severity: HIGH (CVSS 8.1 CVSS:3.0/I:H/UI:N/S:U/AV:N/PR:N/C:H/AC:H/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: DataPower Gateway Problem Types: Bypass Security Description: IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the IPMI LAN channel is enabled. A remote attacker could use this account to gain unauthorised access to the BMC. IBM X-Force ID: 168883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1125615 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1125615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168883
CVE ID: CVE-2019-4623 State: PUBLISHED Published: 2019-12-30T15:35:22.225214Z Last Updated: 2024-09-17T00:06:17.491Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/AV:N/I:L/PR:L/A:N/C:L/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168924. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146424 - h
924. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/168924
CVE ID: CVE-2019-4631 State: PUBLISHED Published: 2020-01-28T18:30:53.460066Z Last Updated: 2024-09-16T19:35:34.651Z Severity: HIGH (CVSS 7.4 CVSS:3.0/UI:R/PR:N/C:N/AV:N/I:H/AC:L/A:N/S:C/E:U/RL:O/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Gain Access Description: IBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or co
ous Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 170001. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170001
CVE ID: CVE-2019-4632 State: PUBLISHED Published: 2020-01-28T18:30:53.947556Z Last Updated: 2024-09-16T16:22:57.810Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/C:L/I:L/AC:L/PR:N/UI:R/S:C/A:N/RC:C/RL:O/E:H) Vendors: IBM Products: Security Secret Server Problem Types: Cross-Site Scripting Description: IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170004. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283254
170004. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170004
CVE ID: CVE-2019-4633 State: PUBLISHED Published: 2020-01-28T18:30:54.378283Z Last Updated: 2024-09-16T20:01:26.507Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/S:U/UI:R/PR:N/AV:N/C:L/AC:H/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170007