Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sion. IBM X-Force ID: 150947. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150947 - http://www.securityfocus.com/bid/106217 - https://www.ibm.com/support/docview.wss?uid=ibm10743005
CVE ID: CVE-2018-1850 State: PUBLISHED Published: 2018-10-22T13:00:00Z Last Updated: 2024-09-16T23:16:49.832Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Bypass Security Description: IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running. IBM X-Force ID: 150998. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150998 - http://www.ibm.com/support/docview.wss?uid=ibm10734555 - http://www.securitytracker.
mcloud.com/vulnerabilities/150998 - http://www.ibm.com/support/docview.wss?uid=ibm10734555 - http://www.securitytracker.com/id/1042036
CVE ID: CVE-2018-1851 State: PUBLISHED Published: 2018-10-31T13:00:00Z Last Updated: 2024-09-16T20:01:38.137Z Severity: HIGH (CVSS 7.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclou
IBM X-Force ID: 150999. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150999 - https://www.ibm.com/support/docview.wss?uid=ibm10735105 - http://www.securityfocus.com/bid/105839
CVE ID: CVE-2018-1853 State: PUBLISHED Published: 2019-04-08T14:50:37.755269Z Last Updated: 2024-09-16T19:01:38.024Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/AC:L/I:L/A:N/PR:N/AV:N/UI:R/S:C/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Cross-Site Scripting Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 151014. Additional Analyst Notes: - CVE Program Containe
ibly launch further attacks against the victim. IBM X-Force ID: 151014. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10870718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151014
CVE ID: CVE-2018-1857 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T22:14:52.754Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:L/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and gain access to data they shouldn't be able to see. IBM X-Force ID: 151155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042176 - http://www.securityfocus.com/bid/105883 - http://www.ibm.com/support/docview.wss?uid=ibm10734059 - h
er.com/id/1042176 - http://www.securityfocus.com/bid/105883 - http://www.ibm.com/support/docview.wss?uid=ibm10734059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151155
CVE ID: CVE-2018-1858 State: PUBLISHED Published: 2019-06-25T15:45:29.658551Z Last Updated: 2024-09-16T20:46:58.598Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/AV:N/S:U/I:N/UI:R/AC:L/A:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 151256. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10794169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151256
: - http://www.ibm.com/support/docview.wss?uid=ibm10794169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151256 - http://www.securityfocus.com/bid/108898 - http://www.securityfocus.com/bid/109111
CVE ID: CVE-2018-1859 State: PUBLISHED Published: 2019-01-04T15:00:00Z Last Updated: 2024-09-17T02:27:21.055Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:H/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Privileges Description: IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privileges. IBM X-Force ID: 151258. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/151258 - https://www.ibm.com/support/docview.wss?uid=ibm10792055 - http://www.securityfocus.com/bid/106456
CVE ID: CVE-2018-1871 State: PUBLISHED Published: 2018-12-06T14:00:00Z Last Updated: 2024-09-16T17:38:49.342Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Cross-Site Scripting Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151329. Additional Analyst Notes: - CVE Program Contai
credentials disclosure within a trusted session. IBM X-Force ID: 151329. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10743123 - http://www.securityfocus.com/bid/106149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151329
CVE ID: CVE-2018-1872 State: PUBLISHED Published: 2018-11-09T17:00:00Z Last Updated: 2024-09-16T23:40:57.500Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151330. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm107374
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10737461 - http://www.securityfocus.com/bid/106140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151330
CVE ID: CVE-2018-1874 State: PUBLISHED Published: 2019-04-02T13:20:33.838340Z Last Updated: 2024-09-17T01:41:22.740Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/UI:N/C:H/AC:L/S:U/PR:N/AV:P/A:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access to the system. IBM X-Force ID: 151636. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10876994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151636 - http://www.securityfocus.com/bid/107733
CVE ID: CVE-2018-1875 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T17:18:35.841Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Governance Catalog, InfoSphere Information Server on Cloud Problem Types: Gain Access Description: IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to
ld exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 151639. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/151639 - http://www.ibm.com/support/docview.wss?uid=ibm10738911
CVE ID: CVE-2018-1876 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-17T01:16:31.146Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10735967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151707
CVE ID: CVE-2018-1877 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T21:07:24.736Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10735973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1517
es: - http://www.ibm.com/support/docview.wss?uid=ibm10735973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151713
CVE ID: CVE-2018-1878 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T16:23:53.283Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/151714 - https://www.ibm.com/support/docview.wss?uid=ibm10735977
CVE ID: CVE-2018-1882 State: PUBLISHED Published: 2019-04-08T14:50:37.800074Z Last Updated: 2024-09-17T00:20:45.091Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/UI:N/S:U/C:H/AC:H/I:N/PR:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect for Space Management, Spectrum Protect Problem Types: Obtain Information Description: In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10869208 - http://www.ibm.com/support/docview.wss?uid=ibm10869436
nces: - http://www.ibm.com/support/docview.wss?uid=ibm10869208 - http://www.ibm.com/support/docview.wss?uid=ibm10869436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151968 - http://www.securityfocus.com/bid/107861
CVE ID: CVE-2018-1883 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-16T22:13:59.986Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service attack preventing users from logging into the MQ Console REST API. IBM X-Force ID: 151969. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/151969 - https://www.ibm.com/support/docview.wss?uid=ibm10738197 - http://www.securi
xforce.ibmcloud.com/vulnerabilities/151969 - https://www.ibm.com/support/docview.wss?uid=ibm10738197 - http://www.securityfocus.com/bid/106146
CVE ID: CVE-2018-1884 State: PUBLISHED Published: 2018-11-12T16:00:00Z Last Updated: 2024-09-16T19:20:19.622Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/A:L/AC:L/AV:L/C:L/I:L/PR:L/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Case Manager Problem Types: Gain Access Description: IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10737897 - http://www.securityfocus.com/bid/105946 - https://exchange.xforce.ibmclou
.ibm.com/support/docview.wss?uid=ibm10737897 - http://www.securityfocus.com/bid/105946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/151970
CVE ID: CVE-2018-1885 State: PUBLISHED Published: 2019-04-08T14:50:37.845952Z Last Updated: 2024-09-17T00:25:32.046Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/C:L/PR:N/A:N/I:N/AV:N/S:U/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10878106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152020 - http://www.
.ibm.com/support/docview.wss?uid=ibm10878106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152020 - http://www.securityfocus.com/bid/107863
CVE ID: CVE-2018-1886 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T02:57:54.868Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 152021. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnera
ner: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152021
CVE ID: CVE-2018-1887 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T01:26:54.643Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 152078. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfor
nal data. IBM X-Force ID: 152078. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152078 - http://www.ibm.com/support/docview.wss?uid=ibm10787785
CVE ID: CVE-2018-1888 State: PUBLISHED Published: 2019-01-04T15:00:00Z Last Updated: 2024-09-16T23:45:34.906Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:L/AC:L/AV:L/C:L/I:L/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: i Access for Windows Problem Types: Gain Access Description: An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106455 - https://www.ibm.com/support/docview.wss?uid=ibm10
ram Container: References: - http://www.securityfocus.com/bid/106455 - https://www.ibm.com/support/docview.wss?uid=ibm10740233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152079
CVE ID: CVE-2018-1889 State: PUBLISHED Published: 2018-12-17T16:00:00Z Last Updated: 2024-09-16T18:28:26.440Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152080. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106231 - https://excha
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152080 - https://www.ibm.com/support/docview.wss?uid=ibm10743371
CVE ID: CVE-2018-1890 State: PUBLISHED Published: 2019-03-11T22:00:00.000Z Last Updated: 2025-02-13T16:27:18.602Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/A:L/AC:H/AV:L/C:L/I:L/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Patterns, WebSphere Application Server, Runtimes for Java Technology Problem Types: Gain Privileges Description: IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152081 - https://www.ibm.com/sup
E Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152081 - https://www.ibm.com/support/docview.wss?uid=ibm10873042 - https://www.ibm.com/support/docview.wss?uid=ibm10873332 - https://www.ibm.com/support/docview.wss?uid=ibm10874750 - http://www.securityfocus.com/bid/107448
CVE ID: CVE-2018-1891 State: PUBLISHED Published: 2018-12-17T16:00:00Z Last Updated: 2024-09-17T02:36:45.846Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742865 -
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152082 - http://www.securityfocus.com/bid/106239
CVE ID: CVE-2018-1892 State: PUBLISHED Published: 2019-06-27T13:45:29.670935Z Last Updated: 2024-09-16T22:50:38.218Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/S:C/AC:L/A:N/UI:R/AV:N/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152156. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 152156. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152156
CVE ID: CVE-2018-1893 State: PUBLISHED Published: 2019-06-27T13:45:29.712887Z Last Updated: 2024-09-16T23:11:08.331Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/PR:L/I:L/S:C/C:L/AC:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152157. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 152157. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152157
CVE ID: CVE-2018-1895 State: PUBLISHED Published: 2019-02-15T20:00:00Z Last Updated: 2024-09-17T04:10:32.865Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.
ssion. IBM X-Force ID: 152159. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152159 - http://www.ibm.com/support/docview.wss?uid=ibm10744013
CVE ID: CVE-2018-1896 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-16T22:25:00.146Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Connections Problem Types: Gain Access Description: IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152456 - https://www.ibm.com/support/docview.wss?uid=ibm10742567 - http://www.securityfocus.com/bid/106197