Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2955 State: PUBLISHED Published: 2013-05-27T14:00:00 Last Updated: 2024-08-06T15:52:21.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, related to a stored XSS issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83664
CVE ID: CVE-2013-2956 State: PUBLISHED Published: 2013-05-27T14:00:00 Last Updated: 2024-08-06T15:52:21.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83665
CVE ID: CVE-2013-2957 State: PUBLISHED Published: 2013-05-27T14:00:00 Last Updated: 2024-08-06T15:52:21.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83666
CVE ID: CVE-2013-2959 State: PUBLISHED Published: 2013-05-27T14:00:00 Last Updated: 2024-08-06T15:52:21.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83668
CVE ID: CVE-2013-2960 State: PUBLISHED Published: 2013-06-21T17:00:00 Last Updated: 2024-08-06T15:52:21.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.
rafted http URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 - http://www-01.ibm.com/support/docview.wss?uid=swg21635080 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83724 - http://www-01.ibm.com/support/docview.wss?uid=swg21640752
CVE ID: CVE-2013-2961 State: PUBLISHED Published: 2013-06-21T17:00:00 Last Updated: 2024-08-06T15:52:21.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to perform unspecified redirection of HTTP requests, and bypass the proxy-server configuration, via crafted HTTP traffic. Additional Analyst Notes: - CVE Program Container: Referen
ass the proxy-server configuration, via crafted HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 - http://www-01.ibm.com/support/docview.wss?uid=swg21635080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83725 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116 - http://www-01.ibm.com/support/docview.wss?uid=swg21640752
CVE ID: CVE-2013-2962 State: PUBLISHED Published: 2014-02-06T23:00:00 Last Updated: 2024-08-06T15:52:21.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4 allows local users to cause a denial of service (process crash or Admin Console command-stream outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83722
CVE ID: CVE-2013-2964 State: PUBLISHED Published: 2013-10-04T10:00:00 Last Updated: 2024-08-06T15:52:21.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96517 - http://www-01.ibm.com/support/docview.wss?uid=swg21651120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83760
CVE ID: CVE-2013-2967 State: PUBLISHED Published: 2013-08-21T21:00:00 Last Updated: 2024-08-06T15:52:21.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83871 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM78614
CVE ID: CVE-2013-2968 State: PUBLISHED Published: 2013-06-19T14:00:00 Last Updated: 2024-08-06T15:52:21.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified buffer-read method in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83859
CVE ID: CVE-2013-2969 State: PUBLISHED Published: 2013-06-19T14:00:00 Last Updated: 2024-08-06T15:52:21.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83860
CVE ID: CVE-2013-2970 State: PUBLISHED Published: 2013-06-03T23:00:00 Last Updated: 2024-08-06T15:52:21.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21639309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83872 - http://www.kb.cert.org/vuls/id/722868
CVE ID: CVE-2013-2971 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-2972 State: PUBLISHED Published: 2018-07-11T16:00:00 Last Updated: 2024-08-06T15:52:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21635993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83868
CVE ID: CVE-2013-2973 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-2974 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T15:52:21.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted parameters to the BIRT reporting URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21662955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83877
CVE ID: CVE-2013-2976 State: PUBLISHED Published: 2013-08-21T21:00:00 Last Updated: 2024-08-06T15:52:21.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83965 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM79992
CVE ID: CVE-2013-2977 State: PUBLISHED Published: 2013-05-10T10:00:00 Last Updated: 2024-08-06T15:52:21.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21635878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83967
CVE ID: CVE-2013-2978 State: PUBLISHED Published: 2013-08-27T01:00:00 Last Updated: 2024-08-06T15:52:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2988. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21645566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83971
CVE ID: CVE-2013-2979 State: PUBLISHED Published: 2013-08-22T22:00:00 Last Updated: 2024-08-06T15:52:21.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21647415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83972
CVE ID: CVE-2013-2980 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T15:52:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84113 - http://www-01.ibm.com/support/docview.wss?uid=swg21638733
CVE ID: CVE-2013-2981 State: PUBLISHED Published: 2013-06-17T10:00:00 Last Updated: 2024-08-06T15:52:21.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21638734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83973
CVE ID: CVE-2013-2982 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T15:52:21.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83997 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-2983 State: PUBLISHED Published: 2013-07-02T14:00:00Z Last Updated: 2024-09-17T01:10:39.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling File Gateway 2.2 and Sterling B2B Integrator allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2013-0468. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC91045
CVE ID: CVE-2013-2984 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T15:52:21.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84006 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC91046
CVE ID: CVE-2013-2985 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T15:52:21.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84008 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2013-2986 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-2987 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T15:52:21.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84009
CVE ID: CVE-2013-2988 State: PUBLISHED Published: 2013-08-27T01:00:00 Last Updated: 2024-08-06T15:52:21.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21645566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84010
CVE ID: CVE-2013-2989 State: PUBLISHED Published: 2013-05-28T16:00:00 Last Updated: 2024-08-06T15:52:21.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86449 - http://www-01.ibm.com/support/docview.wss?uid=swg21637561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84
49 - http://www-01.ibm.com/support/docview.wss?uid=swg21637561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84016
CVE ID: CVE-2013-2990 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-2991 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2013-2992 State: PUBLISHED Published: 2013-09-09T10:00:00 Last Updated: 2024-08-06T15:52:21.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47313 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR46013 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47425 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47420 - http://www-01.ibm.com/support/docv
iew.wss?uid=swg1JR47425 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47420 - http://www-01.ibm.com/support/docview.wss?uid=swg21648644 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84018 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR47295
CVE ID: CVE-2013-2993 State: PUBLISHED Published: 2013-07-31T14:00:00 Last Updated: 2024-08-06T15:52:21.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user's active session via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR45302 - http://www-01.ibm.com/support/docview.wss?uid=swg21644391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84031
CVE ID: CVE-2013-2994 State: PUBLISHED Published: 2013-07-31T18:00:00 Last Updated: 2024-08-06T15:52:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified interaction with REST services, which allows remote attackers to issue REST requests in the context of an arbitrary user's active session via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84033 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR45420 - http://www-01.ibm.com/support/docview.wss?uid=swg21644393
CVE ID: CVE-2013-2997 State: PUBLISHED Published: 2013-09-08T16:00:00 Last Updated: 2024-08-06T15:52:21.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21640352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84066
CVE ID: CVE-2013-2998 State: PUBLISHED Published: 2014-05-26T10:00:00 Last Updated: 2024-08-06T15:52:21.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid action_code. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV34110 - http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84841
CVE ID: CVE-2013-2999 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-06T15:52:21.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84115 - https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/
CVE ID: CVE-2013-3000 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-06T15:52:21.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84116 - https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/
CVE ID: CVE-2013-3001 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-06T15:52:21.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84127 - https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/