Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4262 State: PUBLISHED Published: 2020-05-14T15:50:40.811131Z Last Updated: 2024-09-17T03:18:39.927Z Severity: HIGH (CVSS 7.8 CVSS:3.0/C:H/PR:N/A:H/AV:L/S:U/UI:R/I:H/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175645. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175645. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175645
CVE ID: CVE-2020-4263 State: PUBLISHED Published: 2020-05-14T15:50:41.249728Z Last Updated: 2024-09-16T16:23:28.077Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AC:L/I:H/AV:L/S:U/UI:R/C:H/PR:N/A:H/E:U/RC:C/RL:O) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175646. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175646. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175646
CVE ID: CVE-2020-4264 State: PUBLISHED Published: 2020-05-14T15:50:41.704380Z Last Updated: 2024-09-16T18:19:28.440Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AC:L/I:H/S:U/UI:R/AV:L/A:H/PR:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175647. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175647. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175647
CVE ID: CVE-2020-4265 State: PUBLISHED Published: 2020-05-14T15:50:42.204812Z Last Updated: 2024-09-16T20:26:49.700Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/PR:N/C:H/A:H/AV:L/S:U/UI:R/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175648. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175648. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175648
CVE ID: CVE-2020-4266 State: PUBLISHED Published: 2020-05-14T15:50:42.727630Z Last Updated: 2024-09-16T21:03:25.536Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/A:H/C:H/PR:N/UI:R/S:U/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Privileges Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175649. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 175649. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175649
CVE ID: CVE-2020-4267 State: PUBLISHED Published: 2020-04-24T15:50:21.949654Z Last Updated: 2024-09-16T23:01:18.469Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:H/C:N/UI:N/AC:H/S:U/I:N/PR:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6195384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175840
CVE ID: CVE-2020-4268 State: PUBLISHED Published: 2020-04-15T15:13:55.032790Z Last Updated: 2024-09-16T23:30:24.685Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/A:N/UI:R/AV:N/AC:L/PR:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Qradar, QRadar Problem Types: Cross-Site Scripting Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189639 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175841
CVE ID: CVE-2020-4269 State: PUBLISHED Published: 2020-04-15T15:13:55.462071Z Last Updated: 2024-09-16T18:44:46.679Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/A:N/I:N/AC:L/PR:N/AV:N/UI:N/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Qradar, QRadar Problem Types: Obtain Information Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189711 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6189711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175845 - http://seclists.org/fulldisclosure/2020/Apr/34 - http://packetstormsecurity.com/files/157328/QRadar-Community-Edition-7.3.1.6-Default-Credentials.html
CVE ID: CVE-2020-4270 State: PUBLISHED Published: 2020-04-15T15:13:55.908994Z Last Updated: 2024-09-17T02:53:14.645Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/UI:N/AC:L/PR:N/C:H/S:U/A:H/I:H/RL:O/E:U/RC:C) Vendors: IBM Products: Qradar, QRadar Problem Types: Gain Privileges Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175846 - http://seclists.org/fulldisclosure/2020/Apr/38 - http://packetstormsecurity.com/files/157335/QRadar
erabilities/175846 - http://seclists.org/fulldisclosure/2020/Apr/38 - http://packetstormsecurity.com/files/157335/QRadar-Community-Edition-7.3.1.6-Insecure-File-Permissions.html
CVE ID: CVE-2020-4271 State: PUBLISHED Published: 2020-04-15T15:13:56.391670Z Last Updated: 2024-09-16T20:31:36.984Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/A:L/S:U/C:L/UI:N/AV:N/AC:L/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Qradar, QRadar Problem Types: Gain Privileges Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175897 - http://seclists.org/fulldisclosure/2020/Apr/39 - http://pac
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/175897 - http://seclists.org/fulldisclosure/2020/Apr/39 - http://packetstormsecurity.com/files/157336/QRadar-Community-Edition-7.3.1.6-PHP-Object-Injection.html
CVE ID: CVE-2020-4272 State: PUBLISHED Published: 2020-04-15T15:13:56.922342Z Last Updated: 2024-09-16T20:43:09.801Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/C:L/UI:R/AV:N/AC:L/PR:L/I:L/A:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar, Qradar Problem Types: Gain Privileges Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID: 175898. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189645
175898. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175898 - http://seclists.org/fulldisclosure/2020/Apr/40 - http://packetstormsecurity.com/files/157337/QRadar-Community-Edition-7.3.1.6-Arbitrary-Object-Instantiation.html
CVE ID: CVE-2020-4273 State: PUBLISHED Published: 2020-04-03T12:35:12.184193Z Last Updated: 2024-09-16T18:44:16.548Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:H/S:U/AV:L/C:H/I:H/UI:N/PR:N/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Privileges Description: IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using specially crafted input. IBM X-Force ID: 175977. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6151701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175977
CVE ID: CVE-2020-4274 State: PUBLISHED Published: 2020-04-15T15:13:57.349524Z Last Updated: 2024-09-16T16:22:44.252Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AC:L/UI:N/AV:N/C:L/I:L/S:U/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar, Qradar Problem Types: Bypass Security Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175980 - http://seclists.org/fulldisclosure/2020/Apr/41 - http://packet
s://exchange.xforce.ibmcloud.com/vulnerabilities/175980 - http://seclists.org/fulldisclosure/2020/Apr/41 - http://packetstormsecurity.com/files/157338/QRadar-Community-Edition-7.3.1.6-Authorization-Bypass.html
CVE ID: CVE-2020-4276 State: PUBLISHED Published: 2020-03-26T13:20:15.911904Z Last Updated: 2024-09-17T03:28:37.613Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:L/UI:N/A:H/I:H/AC:H/AV:N/S:U/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. X-Force ID: 175984. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6118222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175984
CVE ID: CVE-2020-4277 State: PUBLISHED Published: 2020-04-17T13:25:27.100364Z Last Updated: 2024-09-17T04:09:25.828Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/S:U/C:L/AC:L/A:N/AV:N/UI:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Obtain Information Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6193467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/175993
CVE ID: CVE-2020-4278 State: PUBLISHED Published: 2020-03-05T15:20:13.418950Z Last Updated: 2024-09-16T20:16:43.705Z Severity: HIGH (CVSS 7.4 CVSS:3.0/I:H/C:H/AC:H/A:H/PR:N/S:U/AV:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum LSF, Spectrum LSF Suites, Spectrum Computing Suite for High Performance Analytics Problem Types: Gain Privileges Description: IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug settings are enabled in a Linux or Unix enviornment. IBM X-Force ID: 176137. Additional Analyst Notes: - CVE Program Container: References: -
in a Linux or Unix enviornment. IBM X-Force ID: 176137. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3357549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176137
CVE ID: CVE-2020-4280 State: PUBLISHED Published: 2020-10-08T13:20:16.545405Z Last Updated: 2024-09-16T18:38:29.526Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/A:L/I:L/C:L/PR:L/UI:N/S:U/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140. Additional Analyst Notes: - CVE Program Container: Referenc
te arbitrary commands on the system. IBM X-Force ID: 176140. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6344079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176140 - http://seclists.org/fulldisclosure/2020/Oct/18 - http://packetstormsecurity.com/files/159589/QRadar-RemoteJavaScript-Deserialization.html
CVE ID: CVE-2020-4281 State: PUBLISHED Published: 2020-06-19T16:10:15.230416Z Last Updated: 2024-09-16T18:13:10.073Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/UI:R/I:L/PR:L/AC:L/C:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176141. Additional Analyst Notes: - CVE Program Container: References: - http
within a trusted session. IBM X-Force ID: 176141. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6235162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176141
CVE ID: CVE-2020-4282 State: PUBLISHED Published: 2020-04-08T14:05:44.995208Z Last Updated: 2024-09-16T23:01:57.100Z Severity: LOW (CVSS 3 CVSS:3.0/AV:N/A:N/UI:R/AC:H/I:L/PR:L/C:N/S:C/RL:O/RC:C/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Bypass Security Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176205
CVE ID: CVE-2020-4283 State: PUBLISHED Published: 2020-03-02T14:00:23.248859Z Last Updated: 2024-09-17T04:04:00.088Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/PR:N/C:H/S:C/A:N/I:N/UI:N/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 176206. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pag
IBM X-Force ID: 176206. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5383395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176206
CVE ID: CVE-2020-4284 State: PUBLISHED Published: 2020-04-08T14:05:45.434817Z Last Updated: 2024-09-16T17:29:13.761Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/PR:N/I:N/S:U/A:N/AV:N/AC:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176207
CVE ID: CVE-2020-4285 State: PUBLISHED Published: 2020-05-14T15:50:43.221996Z Last Updated: 2024-09-16T22:30:50.534Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/A:H/PR:N/C:H/S:U/UI:R/AV:L/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176266 Additional Analyst N
system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176266 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176266
CVE ID: CVE-2020-4286 State: PUBLISHED Published: 2020-05-19T13:15:18.853870Z Last Updated: 2024-09-16T18:55:45.934Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/AV:N/PR:N/A:N/S:U/I:L/AC:L/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176268. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6194751 - https://exchange.xforce.ibmcloud.com/vuln
gram Container: References: - https://www.ibm.com/support/pages/node/6194751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176268
CVE ID: CVE-2020-4287 State: PUBLISHED Published: 2020-05-14T15:50:43.670982Z Last Updated: 2024-09-16T22:21:01.244Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/A:H/PR:N/C:H/UI:R/S:U/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176269. Additional Analyst
system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176269. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176269
CVE ID: CVE-2020-4288 State: PUBLISHED Published: 2020-05-14T15:50:44.112693Z Last Updated: 2024-09-16T17:19:09.842Z Severity: HIGH (CVSS 7.8 CVSS:3.0/UI:R/S:U/AV:L/A:H/PR:N/C:H/AC:L/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176270. Additional Analyst
system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176270. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176270
CVE ID: CVE-2020-4289 State: PUBLISHED Published: 2020-04-08T14:05:45.874335Z Last Updated: 2024-09-16T22:55:40.087Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/I:N/C:L/PR:N/AC:L/UI:N/AV:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
om the cookie. IBM X-Force ID: 176332. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176332
CVE ID: CVE-2020-4290 State: PUBLISHED Published: 2020-04-08T14:05:46.353879Z Last Updated: 2024-09-16T16:37:49.806Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/A:N/AV:N/AC:H/UI:N/C:L/PR:L/I:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Gain Access Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172599 - https://exchange.xforce.ibmc
es: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176333
CVE ID: CVE-2020-4291 State: PUBLISHED Published: 2020-04-08T14:05:46.777985Z Last Updated: 2024-09-16T17:08:57.690Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/A:N/AV:N/UI:R/AC:L/PR:N/C:L/I:N/S:C/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176334