Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4131 State: PUBLISHED Published: 2019-07-11T19:55:18.677605Z Last Updated: 2024-09-17T02:53:12.357Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/A:N/I:L/S:U/PR:N/C:N/AC:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Monitoring Problem Types: Other Description: IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10957121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158270
CVE ID: CVE-2019-4132 State: PUBLISHED Published: 2019-08-29T15:00:16.716395Z Last Updated: 2024-09-16T23:11:13.655Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/S:U/I:N/AV:L/AC:L/A:N/PR:N/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Automation Manager Problem Types: Obtain Information Description: IBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain sensitive information rather than receive a 404 error message. IBM X-Force ID: 158274. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10967477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158274
CVE ID: CVE-2019-4133 State: PUBLISHED Published: 2019-08-29T15:00:16.852854Z Last Updated: 2024-09-17T00:21:24.997Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AC:L/A:L/C:N/PR:N/UI:R/AV:L/I:L/S:C/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Automation Manager Problem Types: Gain Access Description: IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to run a custom script. IBM X-Force ID: 158278. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10967359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158278
CVE ID: CVE-2019-4134 State: PUBLISHED Published: 2019-07-02T15:05:23.156288Z Last Updated: 2024-09-17T02:42:01.097Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/UI:R/AV:N/I:L/C:L/PR:N/A:N/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm108
281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158281
CVE ID: CVE-2019-4135 State: PUBLISHED Published: 2019-06-25T15:45:29.833548Z Last Updated: 2024-09-16T21:02:23.505Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/AV:N/C:H/I:H/AC:H/UI:N/PR:L/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Access Manager Problem Types: Gain Privileges Description: IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users. IBM X-Force ID: 158331. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158331
CVE ID: CVE-2019-4136 State: PUBLISHED Published: 2019-06-17T15:10:22.797749Z Last Updated: 2024-09-16T20:43:19.338Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AC:L/C:L/AV:N/A:N/PR:L/UI:R/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Cross-Site Scripting Description: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158332. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/
ed session. IBM X-Force ID: 158332. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158332
CVE ID: CVE-2019-4137 State: PUBLISHED Published: 2019-05-29T15:10:24.137773Z Last Updated: 2024-09-17T01:51:58.657Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/PR:N/AC:L/I:L/A:N/C:L/S:C/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: Spectrum Control Standard Edition Problem Types: Cross-Site Scripting Description: IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158333. Additional Analyst Notes: - CVE Program Container: References: - http:/
ithin a trusted session. IBM X-Force ID: 158333. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10880375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158333 - http://www.securityfocus.com/bid/108533
CVE ID: CVE-2019-4138 State: PUBLISHED Published: 2019-05-29T15:10:24.210573Z Last Updated: 2024-09-16T23:45:37.130Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/UI:N/C:H/A:N/I:N/AC:H/PR:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Control Standard Edition Problem Types: Obtain Information Description: IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 158334. Additional Analyst Notes: - CVE Program Container: References
on using man in the middle techniques. X-Force ID: 158334. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10880375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158334 - http://www.securityfocus.com/bid/108533
CVE ID: CVE-2019-4139 State: PUBLISHED Published: 2019-05-29T15:10:24.253198Z Last Updated: 2024-09-16T16:18:10.502Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/PR:L/AC:L/A:N/I:L/C:L/UI:R/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158335. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?
rce ID: 158335. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158335 - http://www.securityfocus.com/bid/108527 - https://security.netapp.com/advisory/ntap-20190617-0004/
CVE ID: CVE-2019-4140 State: PUBLISHED Published: 2019-07-02T15:05:23.206440Z Last Updated: 2024-09-17T01:55:47.735Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/UI:N/AV:L/AC:H/C:H/I:H/A:N/S:U/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Data Manipulation Description: IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158336
CVE ID: CVE-2019-4141 State: PUBLISHED Published: 2019-09-27T14:00:20.780461Z Last Updated: 2024-09-16T18:43:22.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/S:U/I:N/A:H/C:N/AV:N/AC:H/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/876772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158337
CVE ID: CVE-2019-4142 State: PUBLISHED Published: 2019-06-18T14:30:18.274498Z Last Updated: 2024-09-16T18:48:56.262Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/A:N/UI:R/I:L/S:U/AV:N/AC:L/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Private Problem Types: Gain Access Description: IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
nces: - https://www.ibm.com/support/docview.wss?uid=ibm10885434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158338
CVE ID: CVE-2019-4143 State: PUBLISHED Published: 2019-04-08T14:50:38.168643Z Last Updated: 2024-09-17T00:10:51.983Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/UI:N/S:U/C:H/AC:L/I:N/A:N/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10878180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158348 - http://www.securityfocus.com/bid/107849
CVE ID: CVE-2019-4145 State: PUBLISHED Published: 2019-06-25T15:45:29.879307Z Last Updated: 2024-09-17T02:31:05.131Z Severity: HIGH (CVSS 7.7 CVSS:3.0/I:H/S:U/AV:L/C:H/PR:N/A:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks against the system. IBM X-Force ID: 158400. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158400
CVE ID: CVE-2019-4146 State: PUBLISHED Published: 2019-04-25T14:36:43.708761Z Last Updated: 2024-09-16T20:12:37.015Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/A:N/S:U/PR:L/AC:H/UI:N/I:N/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances. IBM X-Force ID: 158401. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158401 - http://www.securityfocus.co
/docview.wss?uid=ibm10880595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158401 - http://www.securityfocus.com/bid/108110
CVE ID: CVE-2019-4147 State: PUBLISHED Published: 2019-09-16T18:55:11.373399Z Last Updated: 2024-09-16T20:43:23.842Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/A:L/S:U/AC:L/PR:H/C:L/I:L/AV:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Data Manipulation Description: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 158413. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-sql-injection-vulne
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-sql-injection-vulnerability-affects-ibm-sterling-file-gateway-cve-2019-4147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158413
CVE ID: CVE-2019-4148 State: PUBLISHED Published: 2019-04-25T14:36:43.750887Z Last Updated: 2024-09-16T19:40:18.193Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:H/AV:N/A:N/PR:H/S:C/UI:R/I:L/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158414. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm
rusted session. IBM X-Force ID: 158414. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158414
CVE ID: CVE-2019-4149 State: PUBLISHED Published: 2019-09-05T14:50:15.508801Z Last Updated: 2024-09-16T22:25:21.255Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:R/AV:N/I:L/PR:L/A:N/S:C/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Business Automation Workflow, Business Process Manager Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0 through V8.5.7.0 Cumulative Fix 2017.06, and V8.5.6.0 through V8.5.6.0 CF2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the int
s-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158415. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158415
CVE ID: CVE-2019-4150 State: PUBLISHED Published: 2019-06-25T15:45:29.935158Z Last Updated: 2024-09-17T00:56:34.677Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/AV:N/S:U/I:N/UI:N/AC:H/A:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-Force ID: 158510. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
erences: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158510
CVE ID: CVE-2019-4151 State: PUBLISHED Published: 2019-06-25T15:45:29.976044Z Last Updated: 2024-09-16T19:40:00.913Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/UI:N/PR:N/A:N/S:U/C:H/AV:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158512. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158512
CVE ID: CVE-2019-4152 State: PUBLISHED Published: 2019-06-25T15:45:30.018496Z Last Updated: 2024-09-16T19:10:50.464Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AC:L/UI:N/A:N/PR:N/S:U/AV:L/C:L/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Gain Access Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of proper session expiration may allow attackers with local access to login into a closed browser session. IBM X-Force ID: 158515. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulner
ner: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158515
CVE ID: CVE-2019-4153 State: PUBLISHED Published: 2019-06-25T15:45:30.062003Z Last Updated: 2024-09-17T00:50:37.050Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:C/AV:N/C:N/I:H/AC:L/UI:R/PR:L/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Gain Access Description: IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitiv
a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158517. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158517
CVE ID: CVE-2019-4154 State: PUBLISHED Published: 2019-07-01T15:05:37.747878Z Last Updated: 2024-09-17T02:42:10.865Z Severity: HIGH (CVSS 8.4 CVSS:3.0/S:U/A:H/AV:L/AC:L/PR:N/C:H/UI:N/I:H/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 158519. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880737 - https://exchange.xforce.i
CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158519 - http://www.securityfocus.com/bid/109024
CVE ID: CVE-2019-4155 State: PUBLISHED Published: 2019-04-08T14:50:38.208763Z Last Updated: 2024-09-16T16:18:33.196Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/C:H/PR:L/A:H/I:H/AV:N/S:U/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Gain Privileges Description: IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry. IBM X-Force ID: 158544. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158544 - http://www.securityfocus.com/bid/107806
CVE ID: CVE-2019-4156 State: PUBLISHED Published: 2019-06-25T15:45:30.105632Z Last Updated: 2024-09-16T19:20:32.434Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/UI:N/A:N/PR:N/S:U/AV:N/C:H/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158572. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158572
CVE ID: CVE-2019-4157 State: PUBLISHED Published: 2019-06-25T15:45:30.150987Z Last Updated: 2024-09-16T17:17:40.379Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/UI:R/PR:N/A:N/S:C/AV:N/C:L/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Security Access Manager Problem Types: Cross-Site Scripting Description: IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158573. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/do
IBM X-Force ID: 158573. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158573
CVE ID: CVE-2019-4158 State: PUBLISHED Published: 2019-06-25T15:45:30.194369Z Last Updated: 2024-09-16T20:22:39.265Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/AC:L/UI:N/I:L/S:U/AV:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Access Manager Problem Types: Gain Access Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158574
CVE ID: CVE-2019-4159 State: REJECTED Published: 2019-11-13T15:23:08 Last Updated: 2019-11-13T15:23:08 Description: No description available.
CVE ID: CVE-2019-4160 State: PUBLISHED Published: 2021-01-13T17:40:19.301835Z Last Updated: 2024-09-17T01:11:06.398Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/C:H/A:N/UI:N/S:U/AV:N/PR:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158577
CVE ID: CVE-2019-4161 State: PUBLISHED Published: 2019-06-06T20:45:19.089200Z Last Updated: 2024-09-17T01:05:45.780Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/PR:N/AV:L/AC:L/S:U/UI:N/A:N/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 158660. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158660
CVE ID: CVE-2019-4162 State: PUBLISHED Published: 2019-06-06T20:45:19.148970Z Last Updated: 2024-09-17T03:28:27.638Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/PR:N/AC:H/AV:N/S:U/UI:N/A:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. IBM X-Force ID: 158661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm
over the wire. IBM X-Force ID: 158661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158661