Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4620 State: PUBLISHED Published: 2020-09-22T13:55:45.311882Z Last Updated: 2024-09-16T21:08:28.466Z Severity: HIGH (CVSS 8.8 CVSS:3.0/I:H/UI:N/A:H/PR:L/S:U/AV:N/AC:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Data Risk Manager Problem Types: Gain Access Description: IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 184979. Additional Analyst Notes:
llow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 184979. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184979
CVE ID: CVE-2020-4621 State: PUBLISHED Published: 2020-09-22T13:55:45.802490Z Last Updated: 2024-09-17T04:23:55.864Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/S:U/C:H/AC:L/A:H/UI:N/I:H/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Gain Privileges Description: IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184981
CVE ID: CVE-2020-4622 State: PUBLISHED Published: 2020-09-22T13:55:46.293574Z Last Updated: 2024-09-17T00:21:58.177Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/UI:N/A:N/I:N/C:H/AC:H/AV:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184983
CVE ID: CVE-2020-4623 State: PUBLISHED Published: 2021-07-26T12:10:32.789950Z Last Updated: 2024-09-16T23:06:23.778Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:H/I:H/AC:L/C:H/UI:R/AV:L/PR:H/S:C/E:U/RC:C/RL:O) Vendors: IBM Products: i2 iBase Problem Types: Gain Privileges Description: IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474857 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184984
CVE ID: CVE-2020-4624 State: PUBLISHED Published: 2020-11-30T15:30:28.834432Z Last Updated: 2024-09-17T04:20:38.918Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/A:N/PR:N/I:N/AC:H/S:U/C:L/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6372532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185359
CVE ID: CVE-2020-4625 State: PUBLISHED Published: 2020-11-30T15:30:29.267906Z Last Updated: 2024-09-16T23:56:03.081Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/A:N/I:N/AC:H/PR:N/AV:N/C:L/S:C/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6372536 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6372536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185360
CVE ID: CVE-2020-4626 State: PUBLISHED Published: 2020-11-30T15:30:29.750740Z Last Updated: 2024-09-16T19:40:17.620Z Severity: MEDIUM (CVSS 5 CVSS:3.0/A:N/UI:N/S:C/AV:N/C:L/AC:L/I:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request. IBM X-Force ID: 185362. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6372534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185362
CVE ID: CVE-2020-4627 State: PUBLISHED Published: 2020-11-30T15:30:30.188507Z Last Updated: 2024-09-17T00:11:23.082Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:R/A:L/PR:L/I:L/AC:L/C:L/AV:N/S:C/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Gain Privileges Description: IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6372538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185367
CVE ID: CVE-2020-4628 State: PUBLISHED Published: 2021-01-27T13:05:25.438743Z Last Updated: 2024-09-16T20:22:24.522Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/C:L/AV:N/I:N/AC:L/UI:N/A:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408656 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185369
CVE ID: CVE-2020-4629 State: PUBLISHED Published: 2020-09-30T14:35:14.492401Z Last Updated: 2024-09-16T23:15:52.105Z Severity: LOW (CVSS 2.9 CVSS:3.0/UI:N/AV:L/C:L/PR:N/A:N/AC:H/S:U/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6339255 - https://exchan
al Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6339255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185370
CVE ID: CVE-2020-4631 State: PUBLISHED Published: 2020-08-04T16:00:27.368168Z Last Updated: 2024-09-17T00:15:36.345Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/AV:L/C:H/AC:H/I:N/A:N/PR:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Denial of Service Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255116 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185372
CVE ID: CVE-2020-4632 State: PUBLISHED Published: 2020-09-04T13:35:17.420305Z Last Updated: 2024-09-17T01:01:25.203Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/C:N/I:H/PR:L/AV:A/S:U/UI:N/A:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323721 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185416
CVE ID: CVE-2020-4633 State: PUBLISHED Published: 2020-12-11T14:20:14.376295Z Last Updated: 2024-09-16T22:19:49.884Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:R/S:U/PR:L/C:H/I:L/AC:L/AV:N/A:L/RL:O/RC:C/E:U) Vendors: IBM Products: Resilient Problem Types: Gain Access Description: IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6380884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185418
CVE ID: CVE-2020-4635 State: PUBLISHED Published: 2021-03-19T15:20:15.228244Z Last Updated: 2024-09-17T00:51:33.119Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/S:U/PR:N/I:N/UI:N/A:N/C:L/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Resilient Problem Types: Obtain Information Description: IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6431265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185502
CVE ID: CVE-2020-4636 State: PUBLISHED Published: 2020-10-16T16:40:18.847916Z Last Updated: 2024-09-16T22:40:48.489Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:C/PR:H/AC:L/UI:N/I:L/AV:N/C:H/A:L/RL:O/E:U/RC:C) Vendors: IBM Products: Resilient OnPrem Problem Types: Gain Privileges Description: IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6348694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185503
CVE ID: CVE-2020-4638 State: PUBLISHED Published: 2020-09-03T13:55:20.890287Z Last Updated: 2024-09-16T23:16:36.540Z Severity: HIGH (CVSS 7.2 CVSS:3.0/I:H/AC:L/S:U/C:H/AV:N/PR:H/A:H/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Privileges Description: IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6324751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185508
CVE ID: CVE-2020-4640 State: PUBLISHED Published: 2021-02-04T16:55:37.137394Z Last Updated: 2024-09-16T19:14:50.807Z Severity: LOW (CVSS 3.4 CVSS:3.0/PR:L/AC:H/UI:R/S:U/I:L/A:N/C:L/AV:A/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make use of this information to perform attacks by impersonating a user. IBM X-Force ID: 185510. Additional Analyst Notes: - C
se of this information to perform attacks by impersonating a user. IBM X-Force ID: 185510. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6410486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185510
CVE ID: CVE-2020-4642 State: PUBLISHED Published: 2020-12-23T16:30:15.419298Z Last Updated: 2024-09-16T22:50:23.136Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/S:U/C:N/UI:N/PR:N/I:N/AV:L/AC:L/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a denial of service inside the "DB2 Management Service". Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6391652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185589 - https://security.netapp.com/
/support/pages/node/6391652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185589 - https://security.netapp.com/advisory/ntap-20210129-0009/
CVE ID: CVE-2020-4643 State: PUBLISHED Published: 2020-09-21T17:10:13.402531Z Last Updated: 2024-09-17T01:06:21.758Z Severity: HIGH (CVSS 7.5 CVSS:3.0/C:H/AV:N/AC:L/S:U/A:N/UI:N/I:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information. IBM X-Force ID: 185590. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334311 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185590
CVE ID: CVE-2020-4644 State: PUBLISHED Published: 2020-07-29T14:05:32.447533Z Last Updated: 2024-09-16T16:53:00.771Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/UI:R/PR:N/I:L/AV:N/C:L/AC:L/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 185716. Additional Analyst Notes: - CVE Program Container: References: - h
r attacks against the victim. IBM X-Force ID: 185716. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185716
CVE ID: CVE-2020-4645 State: PUBLISHED Published: 2020-07-29T14:05:32.926281Z Last Updated: 2024-09-16T17:08:03.138Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/AV:N/A:N/AC:L/S:C/UI:R/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Planning Analytics Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 185717. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 185717. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185717
CVE ID: CVE-2020-4646 State: PUBLISHED Published: 2021-05-19T19:40:19.748453Z Last Updated: 2024-09-17T02:05:34.635Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AV:N/UI:N/S:U/C:L/PR:L/AC:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454169 - https://exchange.xforce.ibmcloud.com/vulnerabi
Container: References: - https://www.ibm.com/support/pages/node/6454169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185808
CVE ID: CVE-2020-4647 State: PUBLISHED Published: 2020-11-16T16:40:34.458169Z Last Updated: 2024-09-16T23:46:11.335Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/PR:L/A:L/C:L/AV:N/AC:L/UI:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Data Manipulation Description: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367981 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/185809
CVE ID: CVE-2020-4648 State: PUBLISHED Published: 2020-08-19T12:35:18.454790Z Last Updated: 2024-09-16T22:25:31.569Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:N/UI:N/PR:L/I:H/S:U/AV:N/AC:L/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Data Manipulation Description: A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186019
CVE ID: CVE-2020-4649 State: PUBLISHED Published: 2020-11-03T13:25:21.309945Z Last Updated: 2024-09-16T23:11:48.355Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/S:U/AV:N/A:N/I:N/PR:L/UI:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Planning Analytics Local, Planning Analytics Workspace Problem Types: Obtain Information Description: IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186022
CVE ID: CVE-2020-4650 State: PUBLISHED Published: 2020-11-09T20:25:17.430354Z Last Updated: 2024-09-17T02:32:29.659Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/PR:N/UI:N/I:N/A:N/C:L/AC:L/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Maximo Spatial Asset Management Problem Types: Obtain Information Description: IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 186023. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6361769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186023
CVE ID: CVE-2020-4651 State: PUBLISHED Published: 2020-11-09T20:25:17.867284Z Last Updated: 2024-09-17T03:27:35.881Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/I:H/UI:R/AV:A/PR:N/S:U/A:N/AC:H/C:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Spatial Asset Management Problem Types: Gain Access Description: IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186024. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6361767 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6361767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186024
CVE ID: CVE-2020-4653 State: PUBLISHED Published: 2020-08-19T12:35:18.934137Z Last Updated: 2024-09-16T16:17:49.998Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:R/PR:L/C:N/A:N/I:H/S:C/AC:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct f
site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186082
CVE ID: CVE-2020-4654 State: PUBLISHED Published: 2021-10-08T17:20:12.067151Z Last Updated: 2024-09-16T16:48:04.079Z Severity: LOW (CVSS 3.1 CVSS:3.0/PR:L/UI:N/AC:H/AV:N/A:N/C:L/I:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6497245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186090
CVE ID: CVE-2020-4655 State: PUBLISHED Published: 2020-11-16T16:40:34.940087Z Last Updated: 2024-09-16T20:02:31.368Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/UI:N/AC:L/S:U/I:L/A:L/PR:L/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 186091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
atabase. IBM X-Force ID: 186091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186091
CVE ID: CVE-2020-4657 State: PUBLISHED Published: 2020-12-16T20:35:26.059366Z Last Updated: 2024-09-17T01:52:01.995Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/A:N/C:L/PR:N/S:C/AC:L/AV:N/UI:R/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186094. Additional Analyst Notes: - CVE Program Container: References: - https://w