Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4163 State: PUBLISHED Published: 2019-07-31T16:25:12.678752Z Last Updated: 2024-09-16T23:16:20.672Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/A:N/UI:N/AC:L/I:N/S:U/C:L/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: StoredIQ Problem Types: Obtain Information Description: IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authenticated user to obtain sensitive information that a privileged user should only be allowed to view. IBM X-Force ID: 158696. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10960009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158696
CVE ID: CVE-2019-4165 State: PUBLISHED Published: 2019-07-31T16:25:12.745693Z Last Updated: 2024-09-16T18:28:20.787Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/A:L/UI:N/C:N/PR:N/S:U/I:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: StoredIQ Problem Types: Denial of Service Description: IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service attack using repeated requests to the server. IBM X-Force ID: 158698. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10960131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158698
CVE ID: CVE-2019-4166 State: PUBLISHED Published: 2019-04-30T14:25:14.519809Z Last Updated: 2024-09-16T19:20:15.757Z Severity: HIGH (CVSS 7.4 CVSS:3.0/C:N/S:C/AV:N/AC:L/UI:R/PR:N/A:N/I:H/RL:O/E:U/RC:C) Vendors: IBM Products: StoredIQ Problem Types: Gain Access Description: IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against
r to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158699. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10881404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158699 - http://www.securityfocus.com/bid/108121
CVE ID: CVE-2019-4167 State: PUBLISHED Published: 2019-08-20T19:30:25.432223Z Last Updated: 2024-09-16T20:58:14.826Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:N/UI:R/I:L/A:N/S:U/AV:N/C:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: StoredIQ Problem Types: Gain Access Description: IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158700. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10967327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158700
CVE ID: CVE-2019-4169 State: PUBLISHED Published: 2019-08-26T14:40:14.821844Z Last Updated: 2024-09-16T16:53:14.217Z Severity: HIGH (CVSS 8.1 CVSS:3.0/S:U/UI:N/C:H/AV:A/I:H/AC:L/A:N/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: P9 OpenPOWER, P9 OpenPower Problem Types: Obtain Information Description: IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10881209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158702
CVE ID: CVE-2019-4171 State: PUBLISHED Published: 2019-09-17T19:05:23.715553Z Last Updated: 2024-09-17T01:41:47.225Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/A:N/AC:H/S:U/AV:N/C:L/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 158876. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cogn
gram Container: References: - https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller - https://exchange.xforce.ibmcloud.com/vulnerabilities/158876
CVE ID: CVE-2019-4173 State: PUBLISHED Published: 2019-06-17T15:10:22.837762Z Last Updated: 2024-09-17T00:37:17.811Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/UI:N/PR:L/I:N/S:U/AC:L/C:H/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka Optionsbleed. By sending an OPTIONS HTTP request, a remote attacker could exploit this vulnerability to read secret data from process memory and obtain sensitive information. IBM X-Force ID: 158878. Additional Analyst Notes: - CVE
cret data from process memory and obtain sensitive information. IBM X-Force ID: 158878. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158878
CVE ID: CVE-2019-4174 State: PUBLISHED Published: 2019-06-17T15:10:22.875817Z Last Updated: 2024-09-16T17:58:11.800Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/I:N/UI:N/PR:N/AC:L/S:U/AV:L/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158879
CVE ID: CVE-2019-4175 State: PUBLISHED Published: 2019-09-17T19:05:23.774064Z Last Updated: 2024-09-17T01:17:04.507Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/UI:N/C:H/I:N/PR:N/AC:H/S:U/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller - https://exchange.xforce.ibmcloud.co
upport/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller - https://exchange.xforce.ibmcloud.com/vulnerabilities/158880
CVE ID: CVE-2019-4176 State: PUBLISHED Published: 2019-06-17T15:10:22.914473Z Last Updated: 2024-09-16T16:38:19.205Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/C:L/AC:L/S:U/I:N/UI:N/PR:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https:
al Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158881
CVE ID: CVE-2019-4177 State: PUBLISHED Published: 2019-06-17T15:10:22.951547Z Last Updated: 2024-09-17T01:16:26.369Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/PR:N/I:N/A:N/C:L/AV:L/S:U/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158882
CVE ID: CVE-2019-4178 State: PUBLISHED Published: 2019-04-15T14:55:26.577900Z Last Updated: 2024-09-17T03:28:45.272Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/I:H/C:L/UI:N/AC:H/PR:L/A:L/S:U/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: File Manipulation Description: IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system. IBM X-Force ID: 158919. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158919 - https:
//www.ibm.com/support/docview.wss?uid=ibm10879079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158919 - https://security.netapp.com/advisory/ntap-20190509-0004/
CVE ID: CVE-2019-4183 State: PUBLISHED Published: 2019-09-17T19:05:23.824858Z Last Updated: 2024-09-16T23:15:50.662Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/S:U/PR:N/I:N/C:N/UI:N/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Denial of Service Description: IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158973 - https
: - https://www.ibm.com/support/pages/node/1073530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158973 - https://security.netapp.com/advisory/ntap-20191009-0001/
CVE ID: CVE-2019-4184 State: PUBLISHED Published: 2019-05-29T15:10:24.296150Z Last Updated: 2024-09-16T23:16:04.625Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/UI:R/I:L/A:N/PR:L/AV:N/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158974. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docv
BM X-Force ID: 158974. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158974 - http://www.securityfocus.com/bid/108529
CVE ID: CVE-2019-4185 State: PUBLISHED Published: 2019-06-06T00:35:18.852963Z Last Updated: 2024-09-16T19:09:11.540Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:H/I:H/PR:N/AV:A/A:H/C:H/UI:N/S:C/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158975
CVE ID: CVE-2019-4186 State: PUBLISHED Published: 2019-09-05T14:50:15.588572Z Last Updated: 2024-09-16T16:43:20.348Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/UI:N/A:N/I:L/PR:N/C:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Gain Access Description: IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache p
ill allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/support/pages/node/1071966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158976
CVE ID: CVE-2019-4193 State: PUBLISHED Published: 2019-07-11T19:55:18.721409Z Last Updated: 2024-09-16T17:58:44.822Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/AC:H/AV:N/I:N/PR:N/S:U/A:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Jazz for Service Management Problem Types: Obtain Information Description: IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885985 - https://excha
yst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159032 - http://www.securityfocus.com/bid/109144
CVE ID: CVE-2019-4194 State: PUBLISHED Published: 2019-07-17T14:05:20.944943Z Last Updated: 2024-09-16T18:34:00.145Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/AC:L/S:U/AV:N/PR:N/C:N/A:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Denial of Service Description: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159033
CVE ID: CVE-2019-4201 State: PUBLISHED Published: 2019-06-06T00:35:18.894697Z Last Updated: 2024-09-16T17:53:13.080Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/PR:N/I:H/AC:L/UI:R/S:C/C:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Gain Access Description: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain h
ed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 159122. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10885592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159122
CVE ID: CVE-2019-4202 State: PUBLISHED Published: 2019-04-15T14:55:26.623502Z Last Updated: 2024-09-17T00:35:34.641Z Severity: CRITICAL (CVSS 10 CVSS:3.0/C:H/I:H/AC:L/UI:N/AV:N/S:C/A:H/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159123 -
https://www.ibm.com/support/docview.wss?uid=ibm10880109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159123 - http://www.securityfocus.com/bid/107908
CVE ID: CVE-2019-4203 State: PUBLISHED Published: 2019-04-15T14:55:26.668658Z Last Updated: 2024-09-17T02:47:24.293Z Severity: HIGH (CVSS 8.9 CVSS:3.0/I:L/C:H/AC:L/UI:R/S:C/A:H/PR:L/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159124 - http://www.securityfocus.com/bid/107905
CVE ID: CVE-2019-4204 State: PUBLISHED Published: 2019-05-10T14:40:20.008444Z Last Updated: 2024-09-16T21:08:22.500Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AC:L/C:L/A:N/S:C/PR:L/UI:R/AV:N/RC:C/RL:O/E:H) Vendors: IBM Products: Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159125. Additional Analyst Notes: - CVE Program Container: References:
closure within a trusted session. IBM X-Force ID: 159125. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159125 - http://www.securityfocus.com/bid/108328
CVE ID: CVE-2019-4207 State: PUBLISHED Published: 2019-05-07T18:35:20.821151Z Last Updated: 2024-09-16T19:41:39.864Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/I:N/C:L/PR:N/AC:L/A:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Obtain Information Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system. IBM X-Force ID: 159148. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159128
CVE ID: CVE-2019-4208 State: PUBLISHED Published: 2019-05-07T18:35:20.860858Z Last Updated: 2024-09-17T02:31:18.798Z Severity: HIGH (CVSS 7.1 CVSS:3.0/C:H/AV:N/I:N/AC:L/A:L/UI:N/S:U/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Obtain Information Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10880263 - htt
ional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10880263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159129
CVE ID: CVE-2019-4209 State: PUBLISHED Published: 2020-05-01T16:10:02 Last Updated: 2024-08-04T19:33:37.903Z Vendors: HCL Products: HCL Connections Problem Types: "Open Redirect" Description: HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0077954
CVE ID: CVE-2019-4210 State: PUBLISHED Published: 2019-04-08T14:50:38.251416Z Last Updated: 2024-09-16T17:39:09.617Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/PR:N/A:L/I:H/AC:L/C:H/S:U/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Bypass Security Description: IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158986 - http://www.securityf
support/docview.wss?uid=ibm10879913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/158986 - http://www.securityfocus.com/bid/107859
CVE ID: CVE-2019-4211 State: PUBLISHED Published: 2019-07-17T14:05:20.990567Z Last Updated: 2024-09-16T16:38:47.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:R/C:L/S:C/AV:N/PR:L/I:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159131. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10957143 - http
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10957143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159131
CVE ID: CVE-2019-4212 State: PUBLISHED Published: 2019-07-25T14:30:21.040960Z Last Updated: 2024-09-17T03:38:01.852Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AC:L/UI:R/PR:N/A:N/C:N/AV:N/I:L/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159132
CVE ID: CVE-2019-4214 State: PUBLISHED Published: 2019-11-22T15:21:22.072444Z Last Updated: 2024-09-17T03:59:37.009Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/A:N/UI:N/PR:N/AC:H/S:U/I:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: SmartCloud Analytics Problem Types: Obtain Information Description: IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1110171 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/1110171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159185
CVE ID: CVE-2019-4215 State: PUBLISHED Published: 2019-11-22T15:21:22.504466Z Last Updated: 2024-09-16T19:24:16.789Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/AC:L/UI:R/I:L/S:C/AV:N/C:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: SmartCloud Analytics Problem Types: Gain Access Description: IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159186. Additional Analyst Notes: - CVE Program Container: References: - https
tacks against the victim. IBM X-Force ID: 159186. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1109769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159186