Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1380 State: PUBLISHED Published: 2017-07-24T21:00:00Z Last Updated: 2024-09-16T20:13:27.615Z Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127151. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99961 - http://www.securitytracker.com/id/1038978 - http://www.ibm.com/support
ences: - http://www.securityfocus.com/bid/99961 - http://www.securitytracker.com/id/1038978 - http://www.ibm.com/support/docview.wss?uid=swg22004786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127151
CVE ID: CVE-2017-1381 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-16T17:54:22.193Z Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004792 - http://www.securityfocus.com/bid/99917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127152 - http://www.securitytracker.com/id/
tyfocus.com/bid/99917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127152 - http://www.securitytracker.com/id/1038985
CVE ID: CVE-2017-1382 State: PUBLISHED Published: 2017-07-24T21:00:00Z Last Updated: 2024-09-16T20:36:55.830Z Vendors: IBM Products: WebSphere Application Server Problem Types: Data Manipulation Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038977 - http://www.ibm.com/support/docview.wss?uid=swg22004785 - https://exchange.xforce.ibmcloud.com/
ytracker.com/id/1038977 - http://www.ibm.com/support/docview.wss?uid=swg22004785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127153 - http://www.securityfocus.com/bid/99960
CVE ID: CVE-2017-1383 State: PUBLISHED Published: 2017-08-02T17:00:00Z Last Updated: 2024-09-16T20:27:55.099Z Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127155
CVE ID: CVE-2017-1386 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-17T03:38:28.779Z Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127160 - http://www.securityfocus.com/bid/100008 - http://www.ibm.com/support/docview.wss?uid=swg22004981
CVE ID: CVE-2017-1395 State: PUBLISHED Published: 2018-07-13T16:00:00Z Last Updated: 2024-09-17T00:11:52.145Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 127341. Additional Analyst Notes:
y to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 127341. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127341 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1396 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-16T18:34:51.908Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Gain Access Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 127342. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulne
ainer: References: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127342
CVE ID: CVE-2017-1398 State: PUBLISHED Published: 2017-07-10T16:00:00Z Last Updated: 2024-09-17T02:32:20.301Z Vendors: IBM Products: WebSphere Commerce Enterprise Problem Types: Gain Access Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks again
ear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 127385. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005360 - http://www.securityfocus.com/bid/99491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127385
CVE ID: CVE-2017-1405 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-16T20:12:27.229Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 127392. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127392
CVE ID: CVE-2017-1407 State: PUBLISHED Published: 2017-09-27T17:00:00Z Last Updated: 2024-09-17T03:13:34.434Z Vendors: IBM Products: Security Identity Manager Problem Types: Gain Privileges Description: IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007377 - http://www.securityfocus.com/bid/101015 - https://exchange.xforce.ibmclo
w.ibm.com/support/docview.wss?uid=swg22007377 - http://www.securityfocus.com/bid/101015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127394
CVE ID: CVE-2017-1409 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T02:53:00.436Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 127396. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127396 - http://www.ibm.com/support/docview.wss?uid
: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127396 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1411 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T01:25:32.529Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127399 - http://www.ibm.com/support/docv
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127399 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1412 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T00:37:23.642Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1274
es: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127400
CVE ID: CVE-2017-1418 State: PUBLISHED Published: 2018-11-26T17:00:00Z Last Updated: 2024-09-16T21:02:41.299Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Integration Bus, WebSphere Message Broker Problem Types: File Manipulation Description: IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud
BM X-Force ID: 127406. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127406 - http://www.ibm.com/support/docview.wss?uid=ibm10735181
CVE ID: CVE-2017-1421 State: PUBLISHED Published: 2017-12-13T18:00:00Z Last Updated: 2024-09-17T03:28:55.366Z Vendors: IBM Products: iNotes Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102153 - http://www.ibm.com/support/docview.wss?uid=swg22005234 - http://www.securitytracker.com/id/1040015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127411
CVE ID: CVE-2017-1422 State: PUBLISHED Published: 2017-08-22T19:00:00Z Last Updated: 2024-09-16T20:11:57.411Z Vendors: IBM Products: MaaS360 DTM Problem Types: Obtain Information Description: IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100415 - http://www.ibm.com/support/docview.wss?uid=swg22006985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127412
CVE ID: CVE-2017-1423 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-17T03:58:45.847Z Vendors: IBM Products: WebSphere Portal Problem Types: Obtain Information Description: IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22011400 - http://www.securitytracker.com/id/1040017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127476
CVE ID: CVE-2017-1424 State: PUBLISHED Published: 2017-09-25T16:00:00Z Last Updated: 2024-09-16T17:15:21.256Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127477. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005112 - http://www.securityfocus.com/bid/100962 - https://exchange.xforce.ibmc
www.ibm.com/support/docview.wss?uid=swg22005112 - http://www.securityfocus.com/bid/100962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127477
CVE ID: CVE-2017-1425 State: PUBLISHED Published: 2017-09-26T17:00:00Z Last Updated: 2024-09-16T20:13:23.987Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127478. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006265 - http://www.securityfocus.com/bid/100961 - https://exchange
s: - http://www.ibm.com/support/docview.wss?uid=swg22006265 - http://www.securityfocus.com/bid/100961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127478
CVE ID: CVE-2017-1427 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T17:44:00.652Z Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127579 - https://security.netapp.com/adviso
w.wss?uid=swg22007242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127579 - https://security.netapp.com/advisory/ntap-20190401-0003/ - https://security.netapp.com/advisory/ntap-20190329-0003/
CVE ID: CVE-2017-1428 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-17T01:10:34.541Z Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127583 - http://www.ibm.com/support/docview.wss?uid=swg22007242 - htt
tps://exchange.xforce.ibmcloud.com/vulnerabilities/127583 - http://www.ibm.com/support/docview.wss?uid=swg22007242 - https://security.netapp.com/advisory/ntap-20190401-0003/ - https://security.netapp.com/advisory/ntap-20190329-0003/
CVE ID: CVE-2017-1429 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-16T19:21:13.182Z Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127587. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127587 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.
change.xforce.ibmcloud.com/vulnerabilities/127587 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.securityfocus.com/bid/101062
CVE ID: CVE-2017-1431 State: PUBLISHED Published: 2017-08-10T15:00:00Z Last Updated: 2024-09-16T20:02:20.092Z Vendors: IBM Products: Streams Problem Types: Cross-Site Scripting Description: IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127632. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127632 - http://www.ibm.com/support/docview.wss?uid=
m/bid/100253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127632 - http://www.ibm.com/support/docview.wss?uid=swg22006827
CVE ID: CVE-2017-1433 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T20:47:10.055Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/127803 - http://www.ibm.com/support/docview.wss?uid=swg22005525 - http://www.securityfocus.com/bid/102163
CVE ID: CVE-2017-1434 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-16T18:03:53.908Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127806 - http://www.ibm.com/support/docview.wss?uid=swg22005740 - http://www.securityfocus.com/bid/100693
CVE ID: CVE-2017-1438 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-17T02:57:10.720Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128057 - http://www.ibm.com/support/docview.wss?uid=swg22006885 - http://www.securitytracker.com/id/1039300 - http://www.securityfocus.com/bid/100685
CVE ID: CVE-2017-1439 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-16T22:15:16.550Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128058. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039301 - http://www.ibm.com/support/docview.wss?uid=swg22006061 - http://www.securityfocus.com/bid/100690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/128058
CVE ID: CVE-2017-1440 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-16T18:19:21.159Z Vendors: IBM Products: Emptoris Services Procurement Problem Types: Gain Access Description: IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128105 - http://www-01.ibm.com/support/docview.wss?uid=swg220055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128105 - http://www-01.ibm.com/support/docview.wss?uid=swg22005550 - http://www.securityfocus.com/bid/99542
CVE ID: CVE-2017-1441 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-17T00:20:58.380Z Vendors: IBM Products: Emptoris Services Procurement Problem Types: Obtain Information Description: IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128106 - http://www.securityfocus.com/bid/99547 - http://www-01.ibm.com/support/docview.wss?uid=swg22005550
CVE ID: CVE-2017-1442 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-16T23:11:16.738Z Vendors: IBM Products: Emptoris Services Procurement Problem Types: Gain Access Description: IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 128107. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128107 - http://www-01.ibm.com/support/docview.wss?uid=swg22005550 - http://www.securityfocus.com/bid/99542
CVE ID: CVE-2017-1443 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-17T03:34:12.949Z Vendors: IBM Products: Emptoris Services Procurement Problem Types: Cross-Site Scripting Description: IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128109. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128109 - http://www-01.ibm.com/support/docview.wss?uid=swg22005550 - h
ps://exchange.xforce.ibmcloud.com/vulnerabilities/128109 - http://www-01.ibm.com/support/docview.wss?uid=swg22005550 - http://www.securityfocus.com/bid/99542