Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22415 State: PUBLISHED Published: 2022-05-05T16:00:34.554495Z Last Updated: 2024-09-17T01:21:22.592Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AC:L/A:N/S:U/UI:N/AV:N/C:L/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: A vulnerability exists where an IBM Robotic Process Automation 21.0.1 regular user is able to obtain view-only access to some admin pages in the Control Center IBM X-Force ID: 223029. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223029
CVE ID: CVE-2022-22416 State: PUBLISHED Published: 2022-07-19T16:25:22.492426Z Last Updated: 2024-09-16T16:47:43.485Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:N/AV:N/PR:L/C:L/S:U/A:N/I:L/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling Partner Engagement Manager on Cloud, Sterling Partner Engagement Manager Problem Types: Gain Access Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 223126. Additional Analyst Notes: - CVE Program
ng to network enumeration or facilitating other attacks. IBM X-Force ID: 223126. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223126
CVE ID: CVE-2022-22417 State: PUBLISHED Published: 2022-07-19T16:25:23.938541Z Last Updated: 2024-09-16T19:04:38.414Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/A:N/I:L/AC:L/AV:N/PR:L/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling Partner Engagement Manager on Cloud, Sterling Partner Engagement Manager Problem Types: Cross-Site Scripting Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223127. Additional A
nctionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223127. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223127
CVE ID: CVE-2022-22423 State: PUBLISHED Published: 2022-09-23T17:35:14.452Z Last Updated: 2025-05-22T19:53:19.985Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:C/I:N/AC:L/UI:N/PR:L/C:N/AV:L/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: CCA for MTM 4767 Problem Types: Denial of Service Description: IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6695893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223596
CVE ID: CVE-2022-22424 State: PUBLISHED Published: 2022-07-20T17:35:20.913498Z Last Updated: 2024-09-16T17:33:29.457Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/AV:L/I:N/C:H/S:U/PR:N/A:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6605433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223597
CVE ID: CVE-2022-22425 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:36:35.878Z Vendors: n/a Products: IBM InfoSphere Information Server Problem Types: CSV Injection Description: "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6829953
CVE ID: CVE-2022-22426 State: PUBLISHED Published: 2022-06-10T16:00:21.215526Z Last Updated: 2024-09-16T23:36:56.867Z Severity: LOW (CVSS 2.9 CVSS:3.0/A:N/AC:H/I:N/S:U/C:L/UI:N/AV:L/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Obtain Information Description: IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718. Additional Analyst Note
ss to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6593721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223718
CVE ID: CVE-2022-22427 State: PUBLISHED Published: 2022-04-28T16:10:30.207183Z Last Updated: 2024-09-17T00:26:55.885Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/C:L/AV:A/UI:R/S:C/PR:N/A:N/I:L/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 223720. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6575589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223720
CVE ID: CVE-2022-22433 State: PUBLISHED Published: 2022-05-05T16:00:48.333471Z Last Updated: 2024-09-16T18:08:19.541Z Severity: LOW (CVSS 2.7 CVSS:3.0/I:L/AC:L/A:N/S:U/UI:N/AV:N/C:N/PR:H/E:U/RL:O/RC:C) Vendors: IBM Products: Robotic Process Automation Problem Types: Bypass Security Description: IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack oth
s to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 224156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224156
CVE ID: CVE-2022-22434 State: PUBLISHED Published: 2022-05-05T16:01:02.031412Z Last Updated: 2024-09-16T18:09:24.670Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/S:U/A:N/AC:H/I:H/C:N/PR:N/AV:P/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Data Manipulation Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with physical access to create an API request modified to create additional objects. IBM X-Force ID: 224159. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6579959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224159
CVE ID: CVE-2022-22435 State: PUBLISHED Published: 2022-04-21T16:35:17.627573Z Last Updated: 2024-09-16T19:20:35.734Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/PR:L/C:L/A:N/AC:L/S:C/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573669 - https://exchange
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224162
CVE ID: CVE-2022-22436 State: PUBLISHED Published: 2022-04-21T16:35:19.165725Z Last Updated: 2024-09-17T03:18:23.384Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/I:L/S:C/UI:R/C:L/PR:L/AV:N/A:N/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/65
e ID: 224164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224164
CVE ID: CVE-2022-22441 State: PUBLISHED Published: 2022-04-28T16:10:31.699304Z Last Updated: 2024-09-17T01:06:00.629Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:H/I:N/A:N/PR:L/AC:L/S:U/UI:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6575599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224426
CVE ID: CVE-2022-22442 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:35:58.648Z Vendors: n/a Products: IBM InfoSphere Information Server Problem Types: Information Disclosure Description: "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6829325
CVE ID: CVE-2022-22443 State: PUBLISHED Published: 2022-04-28T16:10:33.504646Z Last Updated: 2024-09-16T22:14:31.108Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/PR:L/I:L/AV:N/UI:R/S:C/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 224440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6575611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224440
CVE ID: CVE-2022-22444 State: PUBLISHED Published: 2022-06-15T15:40:14.630739Z Last Updated: 2024-09-16T22:30:04.252Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/I:N/AV:L/A:H/C:N/S:U/AC:L/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 224444. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6594859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224444
CVE ID: CVE-2022-22445 State: PUBLISHED Published: 2022-07-18T17:00:37.475117Z Last Updated: 2024-09-17T00:01:52.263Z Severity: HIGH (CVSS 7.6 CVSS:3.0/PR:H/S:C/AV:N/A:L/UI:N/AC:L/I:H/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Bypass Security Description: An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224546
CVE ID: CVE-2022-22447 State: PUBLISHED Published: 2023-10-03T23:17:57.643Z Last Updated: 2024-09-19T19:28:42.076Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Disconnected Log Collector Problem Types: CWE-200 Description: IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7042313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224648
CVE ID: CVE-2022-22449 State: PUBLISHED Published: 2022-12-22T21:26:07.329Z Last Updated: 2025-04-15T13:34:06.402Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Governance, Identity Manager Problem Types: CWE-209 Description: IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 224915. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6849247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224915
CVE ID: CVE-2022-22450 State: PUBLISHED Published: 2022-07-14T17:40:15.871808Z Last Updated: 2024-09-17T03:32:26.385Z Severity: LOW (CVSS 3.8 CVSS:3.0/S:U/A:N/C:L/UI:N/AV:N/PR:H/I:L/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Governance Problem Types: Gain Access Description: IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224916
CVE ID: CVE-2022-22452 State: PUBLISHED Published: 2022-07-14T17:40:23.001408Z Last Updated: 2024-09-17T04:19:29.733Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/PR:N/AV:N/C:L/UI:N/S:U/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Governance Problem Types: Obtain Information Description: IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224918
CVE ID: CVE-2022-22453 State: PUBLISHED Published: 2022-07-14T17:40:30.324024Z Last Updated: 2024-09-16T17:57:49.743Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/S:U/A:N/C:H/UI:N/I:N/PR:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Governance Problem Types: Obtain Information Description: IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224919
CVE ID: CVE-2022-22454 State: PUBLISHED Published: 2022-05-10T15:45:20.362903Z Last Updated: 2024-09-16T22:20:21.128Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:L/AV:L/S:U/PR:N/I:L/C:L/UI:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6584175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224987
CVE ID: CVE-2022-22455 State: PUBLISHED Published: 2022-08-17T16:10:10.562623Z Last Updated: 2024-09-16T20:06:52.733Z Severity: LOW (CVSS 2.3 CVSS:3.0/AC:L/I:N/UI:N/A:N/AV:L/C:L/S:U/PR:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Governance Problem Types: Gain Access Description: IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 224989. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6612733 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6612733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/224989
CVE ID: CVE-2022-22456 State: PUBLISHED Published: 2022-12-22T21:08:16.555Z Last Updated: 2025-04-15T14:28:41.013Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Verify Governance, Identity Manager Problem Types: CWE-79 Description: IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225004. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
IBM X-Force ID: 225004. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6849247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225004
CVE ID: CVE-2022-22457 State: PUBLISHED Published: 2022-12-22T21:20:51.390Z Last Updated: 2025-04-15T13:38:03.668Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance, Identity Manager Problem Types: CWE-319 Description: IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6849247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225007
CVE ID: CVE-2022-22458 State: PUBLISHED Published: 2022-12-22T21:14:32.564Z Last Updated: 2025-04-15T13:38:54.806Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance, Identity Manager Problem Types: CWE-256 Description: IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6849247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225009
CVE ID: CVE-2022-22460 State: PUBLISHED Published: 2022-07-14T17:40:37.141598Z Last Updated: 2024-09-16T20:33:02.904Z Severity: LOW (CVSS 3 CVSS:3.0/AC:H/A:N/S:C/C:L/UI:N/AV:N/PR:H/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Governance Problem Types: Obtain Information Description: IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225013. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225013
CVE ID: CVE-2022-22461 State: PUBLISHED Published: 2022-12-22T19:39:32.078Z Last Updated: 2025-04-15T14:31:12.463Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance, Identity Manager Problem Types: CWE-327 Description: IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225077
CVE ID: CVE-2022-22462 State: PUBLISHED Published: 2023-01-25T18:59:49.056Z Last Updated: 2025-03-31T14:38:06.709Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-327 Description: IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225078
CVE ID: CVE-2022-22463 State: PUBLISHED Published: 2022-07-08T17:45:21.020316Z Last Updated: 2024-09-16T16:38:44.289Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:H/PR:H/A:N/AC:H/AV:A/S:C/UI:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Access Problem Types: Data Manipulation Description: IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 225079. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 225079. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225079
CVE ID: CVE-2022-22464 State: PUBLISHED Published: 2022-07-08T17:45:22.650659Z Last Updated: 2024-09-16T18:08:16.372Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/S:U/AV:N/AC:H/A:N/PR:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225081. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225081