Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0447 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T14:25:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - https://oval.cisecurity.org/repository/search/defini
uls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16240 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2013-0448 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T14:25:10.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16264 - http://marc.info/?l=bugtraq&
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16264 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2013-0449 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T14:25:10.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3A
l - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19123 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16610
CVE ID: CVE-2013-0450 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T14:25:10.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class. Additional Anal
his issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - https://bugzilla.redhat.com/show_bug.cgi?id=906911 - http://rhn.redhat.com/errata/RHSA-2013-0236.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19363 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.red
Adef%3A19363 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0247.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19572 - http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e0d9f4942af - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
urity-announce/2013-02/msg00014.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19286 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0246.html - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0245.html - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS - http://www.securityfocus.com/bid/57703 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
tp://www.securityfocus.com/bid/57703 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16550 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
CVE ID: CVE-2013-0451 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T14:25:10.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV24726 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80967
CVE ID: CVE-2013-0452 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80968 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145 - http://www-01.ibm.com/support/docview.wss?uid=swg2
s/80968 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145 - http://www-01.ibm.com/support/docview.wss?uid=swg21631350
CVE ID: CVE-2013-0453 State: PUBLISHED Published: 2013-03-21T20:00:00 Last Updated: 2024-08-06T14:25:10.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80969 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV37766 - http://www.ibm.com/support/docview.wss?uid=swg21631351
CVE ID: CVE-2013-0454 State: PUBLISHED Published: 2013-03-26T21:00:00 Last Updated: 2024-08-06T14:25:10.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter. Additional Analyst Notes:
fied impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80970 - https://bugzilla.redhat.com/show_bug.cgi?id=928419 - http://www.ubuntu.com/usn/USN-1802-1 - http://www.ibm.com/support/docview.wss?uid=ssg1S1004289 - https://www.samba.org/samba/security/CVE-2013-0454 - https://bugzilla.samba.org/show_bug.cgi?id=8738 - https://lists.samba.org/archive/samba-announce/2012/000259.html
CVE ID: CVE-2013-0455 State: PUBLISHED Published: 2013-07-02T14:00:00Z Last Updated: 2024-09-16T19:14:58.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92888
CVE ID: CVE-2013-0456 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80972 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0457 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T14:25:10.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV20590 - http://www-01.ibm.com/support/docview.wss?uid=swg21625624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81011
CVE ID: CVE-2013-0458 State: PUBLISHED Published: 2013-01-27T18:00:00 Last Updated: 2024-08-06T14:25:10.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2, when login security is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM71139 - http://www.ibm.com/support/docview.wss?uid=swg21622444 - https://exchange.xforce.ibmclo
rt/docview.wss?uid=swg1PM71139 - http://www.ibm.com/support/docview.wss?uid=swg21622444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81012
CVE ID: CVE-2013-0459 State: PUBLISHED Published: 2013-01-27T18:00:00 Last Updated: 2024-08-06T14:25:10.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21622444 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM72536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81013
CVE ID: CVE-2013-0460 State: PUBLISHED Published: 2013-01-27T18:00:00 Last Updated: 2024-08-06T14:25:10.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21622444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81014 - http://www-01.ibm.com/sup
ort/docview.wss?uid=swg21622444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81014 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM72275
CVE ID: CVE-2013-0461 State: PUBLISHED Published: 2013-01-27T18:00:00 Last Updated: 2024-08-06T14:25:10.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21622444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81015 - http://www-01.ibm.com/support/docv
ew.wss?uid=swg21622444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81015 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM71389
CVE ID: CVE-2013-0462 State: PUBLISHED Published: 2013-01-27T18:00:00Z Last Updated: 2024-09-16T23:45:54.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1, 7.0 before 7.0.0.27, 8.0, and 8.5 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerabilities_fixed_in_ibm_websphere_application_server_7_0_0_2785
CVE ID: CVE-2013-0463 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81017
CVE ID: CVE-2013-0464 State: PUBLISHED Published: 2013-06-03T23:00:00 Last Updated: 2024-08-06T14:25:10.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81060 - http://www-01.ibm.com/support/docview.wss?uid=swg21637954 - http://secunia.com/advisories/54971 - http://secunia.com/advisories/55115 - http://www.securityfocus.com/
=swg21637954 - http://secunia.com/advisories/54971 - http://secunia.com/advisories/55115 - http://www.securityfocus.com/bid/60246
CVE ID: CVE-2013-0465 State: PUBLISHED Published: 2013-02-22T20:00:00 Last Updated: 2024-08-06T14:25:10.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM WebSphere Cast Iron physical and virtual appliance 6.0 and 6.1 before 6.1.0.15 and 6.3 before 6.3.0.1, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81061 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI77155 - http://www-01.ibm.com/support/docview.wss?uid=swg
es/81061 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI77155 - http://www-01.ibm.com/support/docview.wss?uid=swg21623324
CVE ID: CVE-2013-0466 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T14:25:10.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623316 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC89383 - https://exchange.xforce.ibmcl
/docview.wss?uid=swg21623316 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC89383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81062
CVE ID: CVE-2013-0467 State: PUBLISHED Published: 2013-02-21T01:00:00 Last Updated: 2024-08-06T14:25:10.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Eclipse Help System (IEHS), as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81102 - http://www-01.ibm.com/support/docview.wss?uid=swg21625573
CVE ID: CVE-2013-0468 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81334 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0470 State: PUBLISHED Published: 2013-04-05T16:00:00 Last Updated: 2024-08-06T14:25:10.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containing asset files via a direct request to a directory URI, as demonstrated by listing image files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81336 - http://www-01.ibm.com/support/docview.wss?uid=swg21631945
CVE ID: CVE-2013-0471 State: PUBLISHED Published: 2013-02-21T02:00:00 Last Updated: 2024-08-06T14:25:10.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The traditional scheduler in the client in IBM Tivoli Storage Manager (TSM) before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service (scheduling outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21624135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81215 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC87331
CVE ID: CVE-2013-0472 State: PUBLISHED Published: 2013-02-21T02:00:00 Last Updated: 2024-08-06T14:25:10.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC87210 - http://www-01.ibm.com/support/docview.wss?uid=swg21624118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81216
CVE ID: CVE-2013-0473 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81337 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0474 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:25:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21631304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81338 - http://www-01.ibm.com/support/docview.wss?uid=swg21626264
CVE ID: CVE-2013-0475 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, and CVE-2013-0567. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81403 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-0476 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T14:25:10.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81405
CVE ID: CVE-2013-0477 State: PUBLISHED Published: 2013-02-21T01:00:00 Last Updated: 2024-08-06T14:25:10.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21624952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81481