Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4955 State: PUBLISHED Published: 2021-02-15T15:05:20.081987Z Last Updated: 2024-09-17T02:31:23.322Z Severity: HIGH (CVSS 8 CVSS:3.0/C:H/S:C/A:H/AC:H/PR:L/UI:N/AV:A/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Gain Privileges Description: IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155. Additional Analyst Notes: - CVE
ulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192155
CVE ID: CVE-2020-4956 State: PUBLISHED Published: 2021-02-15T15:05:21.174907Z Last Updated: 2024-09-17T00:25:43.022Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/C:N/I:N/PR:L/AV:A/UI:N/A:H/S:U/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Denial of Service Description: IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156. Ad
e attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6404966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192156
CVE ID: CVE-2020-4957 State: PUBLISHED Published: 2022-05-17T16:00:18.202892Z Last Updated: 2024-09-16T16:13:56.165Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/UI:N/S:U/C:L/AC:L/AV:N/A:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192208
CVE ID: CVE-2020-4958 State: PUBLISHED Published: 2021-01-21T14:00:26.087914Z Last Updated: 2024-09-17T04:03:52.104Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/I:H/C:H/PR:N/S:U/UI:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Gain Access Description: IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. IBM X-Force ID: 192209. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19
: References: - https://www.ibm.com/support/pages/node/6403247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192209
CVE ID: CVE-2020-4964 State: PUBLISHED Published: 2021-04-12T18:00:23.918366Z Last Updated: 2024-09-16T19:09:59.439Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/C:N/A:N/UI:N/S:U/AV:N/AC:L/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Rational Rhapsody Model Manager, Engineering Lifecycle Optimization, Engineering Workflow Management, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Engineering Test Management, Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Team Concert Problem Types: Data Manipulation Description: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized m
am Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192419
CVE ID: CVE-2020-4965 State: PUBLISHED Published: 2021-04-12T18:00:24.743638Z Last Updated: 2024-09-16T21:07:23.838Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/I:N/A:N/UI:N/S:U/AC:H/AV:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Rational DOORS Next Generation, Engineering Test Management, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Team Concert, Rational Rhapsody Model Manager, Engineering Workflow Management, Engineering Lifecycle Optimization Problem Types: Obtain Information Description: IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sen
eam Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192422
CVE ID: CVE-2020-4966 State: PUBLISHED Published: 2021-01-21T14:00:26.720907Z Last Updated: 2024-09-17T01:12:14.985Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/PR:N/S:U/A:N/UI:R/AV:N/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the
goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 192423. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192423
CVE ID: CVE-2020-4967 State: PUBLISHED Published: 2021-01-27T13:05:28.011241Z Last Updated: 2024-09-16T19:41:41.020Z Severity: LOW (CVSS 3.1 CVSS:3.0/I:N/PR:L/C:L/AV:N/A:N/S:U/UI:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192425
CVE ID: CVE-2020-4968 State: PUBLISHED Published: 2021-01-21T14:00:27.357158Z Last Updated: 2024-09-16T19:31:24.991Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/AC:H/AV:A/A:N/UI:N/S:U/C:H/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192427. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192427
CVE ID: CVE-2020-4969 State: PUBLISHED Published: 2021-01-21T14:00:28.000794Z Last Updated: 2024-09-16T23:36:02.654Z Severity: LOW (CVSS 2.6 CVSS:3.0/A:N/UI:R/S:U/C:L/PR:N/I:N/AC:H/AV:A/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
ation using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192428
CVE ID: CVE-2020-4970 State: PUBLISHED Published: 2022-05-19T16:05:11.447573Z Last Updated: 2024-09-17T03:38:47.123Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/I:N/UI:R/AV:N/PR:N/C:H/A:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 192429. Additional Analyst Notes: - CVE P
tain sensitive information using man in the middle techniques. IBM X-Force ID: 192429. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6587435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192429
CVE ID: CVE-2020-4974 State: PUBLISHED Published: 2021-07-28T12:25:11.431091Z Last Updated: 2024-09-17T01:41:02.443Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/UI:N/C:L/AV:N/PR:L/I:L/AC:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Test Management, Rational Team Concert, Rational Quality Manager, Rational DOORS Next Generation, Rational Collaborative Lifecycle Management, Engineering Workflow Management, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager Problem Types: Gain Access Description: IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,
ver side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6475919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192434
CVE ID: CVE-2020-4975 State: PUBLISHED Published: 2021-03-04T19:05:42.516646Z Last Updated: 2024-09-16T21:07:17.435Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/A:N/AC:L/AV:N/UI:R/I:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Team Concert, Engineering Workflow Management, Rational Quality Manager, Engineering Test Management, Engineering Lifecycle Optimization, Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus
code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192435
CVE ID: CVE-2020-4976 State: PUBLISHED Published: 2021-03-11T15:30:25.232967Z Last Updated: 2024-09-16T19:20:36.208Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/AC:L/AV:L/PR:N/C:L/A:N/I:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6427859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192469 - https://s
https://www.ibm.com/support/pages/node/6427859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192469 - https://security.netapp.com/advisory/ntap-20210409-0003/
CVE ID: CVE-2020-4977 State: PUBLISHED Published: 2021-06-02T20:40:38.393153Z Last Updated: 2024-09-16T20:47:42.592Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AV:N/I:L/A:N/UI:R/AC:L/S:C/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Test Management, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization Problem Types: Cross-Site Scripting Description: IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus
e to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192470. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192470
CVE ID: CVE-2020-4979 State: PUBLISHED Published: 2021-05-05T15:45:32.638215Z Last Updated: 2024-09-17T03:19:12.765Z Severity: HIGH (CVSS 7.5 CVSS:3.0/C:H/PR:N/AV:A/AC:H/UI:N/I:H/S:U/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192538
CVE ID: CVE-2020-4980 State: PUBLISHED Published: 2021-07-16T16:50:25.631010Z Last Updated: 2024-09-16T19:19:16.965Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:H/A:N/AC:H/UI:N/I:N/S:U/PR:N/AV:A/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6472891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192539
CVE ID: CVE-2020-4981 State: PUBLISHED Published: 2021-04-27T16:32:49.829154Z Last Updated: 2024-09-16T22:35:01.573Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/S:U/AC:L/I:H/AV:L/PR:H/A:N/C:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: File Manipulation Description: IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192541
CVE ID: CVE-2020-4983 State: PUBLISHED Published: 2021-01-20T15:00:29.635299Z Last Updated: 2024-09-17T00:11:55.445Z Severity: HIGH (CVSS 7.4 CVSS:3.0/C:H/I:H/AV:L/AC:H/S:U/PR:N/A:H/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum LSF Suite, Spectrum LSF Problem Types: Gain Privileges Description: IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6395478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192586 - https://www.hpcsec.com/2021/01/14/c
t/pages/node/6395478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192586 - https://www.hpcsec.com/2021/01/14/cve-2020-4983/
CVE ID: CVE-2020-4985 State: PUBLISHED Published: 2021-05-14T16:15:34.559094Z Last Updated: 2024-09-16T23:20:51.646Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/A:N/AV:N/S:U/PR:N/AC:H/I:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Obtain Information Description: IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6452743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192642
CVE ID: CVE-2020-4987 State: PUBLISHED Published: 2021-05-04T15:45:14.502211Z Last Updated: 2024-09-17T03:59:23.672Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/UI:N/S:C/AC:L/I:L/PR:L/AV:N/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: FlashSystem 900 Problem Types: Cross-Site Scripting Description: The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - ht
to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192702
CVE ID: CVE-2020-4988 State: PUBLISHED Published: 2020-12-21T17:50:13.815637Z Last Updated: 2024-09-16T16:32:41.086Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/A:L/AC:L/I:L/C:L/S:U/UI:N/PR:N/RL:O/E:U/RC:C) Vendors: Loopback Products: Loopback Problem Types: Gain Access Description: Loopback 8.0.0 contains a vulnerability that could allow an attacker to manipulate or pollute Javascript values and cause a denial of service or possibly execute code. IBM X-Force ID: 192706. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/192706
CVE ID: CVE-2020-4989 State: PUBLISHED Published: 2022-03-15T17:00:14.828562Z Last Updated: 2024-09-17T03:38:28.298Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/PR:L/AV:N/UI:N/S:U/I:N/AC:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Engineering Workflow Management, Rational Team Concert Problem Types: Obtain Information Description: IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an authenticated user to obtain sensitive information about build definitions. IBM X-Force ID: 192707. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6563261 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/6563261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192707
CVE ID: CVE-2020-4990 State: PUBLISHED Published: 2021-05-24T13:55:37.342350Z Last Updated: 2024-09-17T03:48:09.644Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/PR:L/C:H/UI:N/A:L/AC:L/I:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Data Manipulation Description: IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455265 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/6455265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192710
CVE ID: CVE-2020-4992 State: PUBLISHED Published: 2021-08-17T13:55:13.982672Z Last Updated: 2024-09-16T19:09:58.965Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/S:U/AV:N/A:N/I:L/PR:N/AC:L/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: DataPower Gateway Problem Types: Gain Access Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 192737. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6481679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19
: References: - https://www.ibm.com/support/pages/node/6481679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192737
CVE ID: CVE-2020-4993 State: PUBLISHED Published: 2021-05-05T15:45:33.324046Z Last Updated: 2024-09-16T20:42:48.845Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/C:N/PR:H/AV:N/UI:N/AC:L/A:N/S:U/I:H/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: File Manipulation Description: IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192905
CVE ID: CVE-2020-4994 State: PUBLISHED Published: 2022-05-17T16:25:18.615789Z Last Updated: 2024-09-16T23:01:02.031Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/A:L/I:N/AV:N/C:N/S:U/UI:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Denial of Service Description: IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192906
CVE ID: CVE-2020-4995 State: PUBLISHED Published: 2021-02-09T14:50:23.629117Z Last Updated: 2024-09-17T03:34:09.696Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:H/AV:N/UI:N/A:N/S:C/I:N/PR:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a user to obtain sensitive information from another users' session. IBM X-Force ID: 192912. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192912
CVE ID: CVE-2020-4996 State: PUBLISHED Published: 2021-02-09T14:50:24.289292Z Last Updated: 2024-09-16T23:36:19.385Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/UI:N/A:N/S:C/I:N/C:H/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6413389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/192913