Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1885 State: PUBLISHED Published: 2015-04-26T10:00:00 Last Updated: 2024-08-06T04:54:16.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963275 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 - http://www.securitytracker.com/id/1032190 -
d=swg21963275 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 - http://www.securitytracker.com/id/1032190 - http://www-01.ibm.com/support/docview.wss?uid=swg21697368 - http://www.securityfocus.com/bid/74219 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211
CVE ID: CVE-2015-1886 State: PUBLISHED Published: 2015-04-24T23:00:00 Last Updated: 2024-08-06T04:54:16.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05 allows remote attackers to cause a denial of service (memory consumption) via crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI37356 - http://www.securitytracker.com/id/1032189 - http://www-01.ibm.com/support/docview.wss?uid=swg21701566 - http
g1PI37356 - http://www.securitytracker.com/id/1032189 - http://www-01.ibm.com/support/docview.wss?uid=swg21701566 - http://www.securityfocus.com/bid/74216
CVE ID: CVE-2015-1887 State: PUBLISHED Published: 2015-07-14T14:00:00 Last Updated: 2024-08-06T04:54:16.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032970 - http://www.securityfocus.com/bid/75475 - http://www-01.ibm.com/support/docview.wss?uid=swg21958024 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI36150
CVE ID: CVE-2015-1888 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T04:54:16.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700205
CVE ID: CVE-2015-1889 State: PUBLISHED Published: 2015-04-22T10:00:00 Last Updated: 2024-08-06T04:54:16.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or (2) an import of a certain Hive table definition with the HCAT_SYNC_OBJECTS procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032150 - http://www-01.ibm.com/support/docview.wss?uid=swg21700654
CVE ID: CVE-2015-1890 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T04:54:16.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73918 - http://www.ibm.com/support/docview.wss?uid=isg3T1022077
CVE ID: CVE-2015-1892 State: PUBLISHED Published: 2015-04-01T01:00:00 Last Updated: 2024-08-06T04:54:16.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73683 - http://www.kb.cert.org/vuls/id/550620 - http://www-01.ibm.com/
r: References: - http://www.securityfocus.com/bid/73683 - http://www.kb.cert.org/vuls/id/550620 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV70911 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV70913 - http://www-01.ibm.com/support/docview.wss?uid=swg21699497
CVE ID: CVE-2015-1893 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T04:54:16.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032025 - http://www-01.ibm.com/support/docview.wss?uid=swg21701337 - http://www.securityfocus.com/bid/73916 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
CVE ID: CVE-2015-1894 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74441 - http://www-01.ibm.com/support/docview.wss?uid=swg21700768
CVE ID: CVE-2015-1895 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74442 - http://www-01.ibm.com/support/docview.wss?uid=swg21700768
CVE ID: CVE-2015-1896 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700536 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1093 - http://www.securityfocus.com/bid/74024
CVE ID: CVE-2015-1897 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:54:16.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1898. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032102 - http://www-01.ibm.com/support/docview.wss?uid=swg21700057 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1092
CVE ID: CVE-2015-1898 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:54:16.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1897. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032102 - http://www-01.ibm.com/support/docview.wss?uid=swg21700539 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1091 - http://www.sec
gn.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1091 - http://www.securityfocus.com/bid/74036
CVE ID: CVE-2015-1899 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI37139 - http://www-01.ibm.com/support/docview.wss?uid=swg21700066
CVE ID: CVE-2015-1900 State: PUBLISHED Published: 2015-06-29T10:00:00 Last Updated: 2024-08-06T04:54:16.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902280 - http://www.securityfocus.com/bid/75481 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770
CVE ID: CVE-2015-1901 State: PUBLISHED Published: 2015-06-28T14:00:00 Last Updated: 2024-08-06T04:54:16.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21701436 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52549 - http://www.securitytracker.com/id/1032633 - http://www.securityfocus.com/bid/75162
CVE ID: CVE-2015-1902 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T04:54:16.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21883245 - http://www.securitytracker.com/id/1032376 - http://www.securityfocus.com/bid/74597 - http://www.zerodayinitiative.com/advisories/ZDI-15-193
CVE ID: CVE-2015-1903 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T04:54:16.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21883245 - http://www.zerodayinitiative.com/advisories/ZDI-15-194 - http://www.securityfocus.com/bid/74598 - http://www.securitytracker.com/id/1032376
CVE ID: CVE-2015-1904 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:54:16.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypass intended document-access restrictions via a (1) upload or (2) download action. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960293 - http://www-01.ibm.com/sup
E Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21960293 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209 - http://www.securitytracker.com/id/1033159
CVE ID: CVE-2015-1905 State: PUBLISHED Published: 2015-07-21T19:00:00 Last Updated: 2024-08-06T04:54:16.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75977 - http://www-01.ibm.com/support/docview.wss?uid=swg21700717 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 - http://w
ww-01.ibm.com/support/docview.wss?uid=swg21700717 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 - http://www.securitytracker.com/id/1033002
CVE ID: CVE-2015-1906 State: PUBLISHED Published: 2015-07-21T19:00:00 Last Updated: 2024-08-06T04:54:16.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700717 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 - http://www.securitytracker.com/id/1033002
CVE ID: CVE-2015-1907 State: PUBLISHED Published: 2015-05-08T01:00:00 Last Updated: 2024-08-06T04:54:16.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21882666 - http://www.securityfocus.com/bid/74552 - http://www.securitytracker.com/id/1032257
CVE ID: CVE-2015-1908 State: PUBLISHED Published: 2015-04-24T23:00:00 Last Updated: 2024-08-06T04:54:16.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05, as used in Web Content Manager and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032189 - http://www-01.ibm.com/support/docview.wss?uid=swg21701566 - http://www-01.ibm.com/support/
uritytracker.com/id/1032189 - http://www-01.ibm.com/support/docview.wss?uid=swg21701566 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI37661 - http://www.securityfocus.com/bid/74218
CVE ID: CVE-2015-1909 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700754
CVE ID: CVE-2015-1910 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700741
CVE ID: CVE-2015-1911 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales (SFS) 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700864 - http://www.securityfocus.com/bid/74224
CVE ID: CVE-2015-1913 State: PUBLISHED Published: 2015-06-30T10:00:00 Last Updated: 2024-08-06T04:54:16.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server 8.0.0.x before 8.0.0.5, 8.0.1.x before 8.0.1.6, 8.5.0.x before 8.5.0.4, 8.5.1.x before 8.5.1.5, 8.6.0.x before 8.6.0.4, and 8.7.0.x before 8.7.0.2 uses the MD5 algorithm for password hashing, which makes it easier for remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959298 - http://www.securityfocu
CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21959298 - http://www.securityfocus.com/bid/75307
CVE ID: CVE-2015-1914 State: PUBLISHED Published: 2015-07-02T21:16:00 Last Updated: 2024-08-06T04:54:16.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1007.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245 - http://rhn.redhat.com/errata/RHSA-2015-1006.html - http://rhn.redhat.com/errata/RHSA-2015-1091.html - http://www-01
45 - http://rhn.redhat.com/errata/RHSA-2015-1006.html - http://rhn.redhat.com/errata/RHSA-2015-1091.html - http://www-01.ibm.com/support/docview.wss?uid=swg21883640 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html - http://rhn.redhat.com/errata/RHSA-2015-1020.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html - http://www.securityfocus.com/bid/74645 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html - http://rhn.redhat.com/errata/RHSA-2015-1021.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html - http:
rity-announce/2015-06/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV72246
CVE ID: CVE-2015-1915 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T04:54:16.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before IF6 and 9.1.0 before IF6 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74193 - http://www-01.ibm.com/support/docview.wss?uid=swg21882571 - http://www-01.ibm.com/supp
www.securityfocus.com/bid/74193 - http://www-01.ibm.com/support/docview.wss?uid=swg21882571 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV72069
CVE ID: CVE-2015-1916 State: PUBLISHED Published: 2015-07-02T21:16:00 Last Updated: 2024-08-06T04:54:16.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245 - http://www-01.ibm.com/support/docview.wss?uid=swg21883640 - http://www.securitytracker.com/id/1032779
CVE ID: CVE-2015-1917 State: PUBLISHED Published: 2015-07-14T14:00:00 Last Updated: 2024-08-06T04:54:16.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032970 - http://www.securityfocus.com/bid/75479 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI38732 -
r.com/id/1032970 - http://www.securityfocus.com/bid/75479 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI38732 - http://www-01.ibm.com/support/docview.wss?uid=swg21958024
CVE ID: CVE-2015-1919 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T04:54:16.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security QRadar Incident Forensics before 7.2.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75209 - http://www-01.ibm.com/support/docview.wss?uid=swg21960011
CVE ID: CVE-2015-1920 State: PUBLISHED Published: 2015-05-20T00:00:00 Last Updated: 2024-08-06T04:54:16.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21883573 - http://www.securityfocus.com/bid/74439 - http://www.securitytracker.com/id/1032249 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI38302