Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-35690 State: PUBLISHED Published: 2022-10-14T19:42:55.991Z Last Updated: 2025-04-23T16:49:17.654Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-121 Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
crafted network packet is sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
CVE ID: CVE-2022-35691 State: PUBLISHED Published: 2022-10-14T19:45:29.360Z Last Updated: 2025-04-23T16:47:38.566Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-476 Description: Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container:
equires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-46.html
CVE ID: CVE-2022-35692 State: PUBLISHED Published: 2022-08-19T22:49:21.931Z Last Updated: 2025-04-23T17:48:04.290Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account detials. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE ID: CVE-2022-35693 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:26:44.245Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-35694 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:28:23.451Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-35695 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:26:38.199Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-35696 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:28:17.043Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-35697 State: PUBLISHED Published: 2022-08-09T20:12:33.573Z Last Updated: 2025-04-23T17:53:10.927Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires a low author privilege access. Additional Analyst Notes: - CVE Program Containe
ser. Exploitation of this issue requires a low author privilege access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adobe/aem-core-wcm-components/security/advisories/GHSA-qcgc-6q86-7x2p
CVE ID: CVE-2022-35698 State: PUBLISHED Published: 2022-10-14T19:48:10.464Z Last Updated: 2025-04-23T16:47:15.959Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb22-48.html
CVE ID: CVE-2022-35699 State: PUBLISHED Published: 2022-09-19T15:47:08.704Z Last Updated: 2025-04-23T16:58:10.644Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE ID: CVE-2022-35700 State: PUBLISHED Published: 2022-09-19T15:47:09.617Z Last Updated: 2025-04-23T16:57:40.695Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-
CVE ID: CVE-2022-35701 State: PUBLISHED Published: 2022-09-19T15:47:08.506Z Last Updated: 2025-04-23T16:58:16.995Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-
CVE ID: CVE-2022-35702 State: PUBLISHED Published: 2022-09-19T15:47:09.451Z Last Updated: 2025-04-23T16:57:46.642Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes:
oitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE ID: CVE-2022-35703 State: PUBLISHED Published: 2022-09-19T15:47:09.076Z Last Updated: 2025-04-23T16:57:58.428Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes:
CVE ID: CVE-2022-35704 State: PUBLISHED Published: 2022-09-19T15:47:09.816Z Last Updated: 2025-04-23T16:57:35.283Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-416 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.htm
Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE ID: CVE-2022-35705 State: PUBLISHED Published: 2022-09-19T15:47:08.888Z Last Updated: 2025-04-23T16:58:04.533Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes:
CVE ID: CVE-2022-35706 State: PUBLISHED Published: 2022-09-19T15:47:10.293Z Last Updated: 2025-04-23T16:57:23.140Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-122 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/a
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE ID: CVE-2022-35707 State: PUBLISHED Published: 2022-09-19T15:47:09.285Z Last Updated: 2025-04-23T16:57:52.079Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes:
CVE ID: CVE-2022-35708 State: PUBLISHED Published: 2022-09-19T15:47:10.507Z Last Updated: 2025-04-23T16:57:16.791Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-122 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/a
CVE ID: CVE-2022-35709 State: PUBLISHED Published: 2022-09-19T15:47:10.069Z Last Updated: 2025-04-23T16:57:29.183Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-416 Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://h
en a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE ID: CVE-2022-35710 State: PUBLISHED Published: 2022-10-14T19:42:55.472Z Last Updated: 2025-04-23T16:49:31.982Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-121 Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
CVE ID: CVE-2022-35711 State: PUBLISHED Published: 2022-10-14T19:42:56.452Z Last Updated: 2025-04-23T16:49:00.591Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-122 Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
CVE ID: CVE-2022-35712 State: PUBLISHED Published: 2022-10-14T19:42:55.733Z Last Updated: 2025-04-23T16:49:25.623Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-122 Description: Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
CVE ID: CVE-2022-35713 State: PUBLISHED Published: 2022-09-16T17:16:40.794Z Last Updated: 2025-04-23T17:08:19.056Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-787 Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photosh
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE ID: CVE-2022-35714 State: PUBLISHED Published: 2022-08-26T17:25:13.437104Z Last Updated: 2024-09-16T19:50:56.580Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/A:N/UI:R/S:C/AV:N/PR:L/I:L/AC:L/RL:O/RC:C/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231116. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615
ID: 231116. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231116
CVE ID: CVE-2022-35715 State: PUBLISHED Published: 2022-08-10T16:50:35.774Z Last Updated: 2025-10-20T18:01:39.487Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/AC:L/UI:N/AV:N/A:N/I:N/PR:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: 231202. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6610
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6610883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231202
CVE ID: CVE-2022-35716 State: PUBLISHED Published: 2022-07-31T16:08:06.630283Z Last Updated: 2024-09-17T01:56:46.331Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/UI:N/I:N/AV:N/C:H/AC:H/S:U/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608584 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231360
CVE ID: CVE-2022-35717 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T20:19:40.381Z Vendors: n/a Products: IBM InfoSphere Information Server Problem Types: Command Execution Description: "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6829365
CVE ID: CVE-2022-35719 State: PUBLISHED Published: 2022-11-14T16:45:42.537Z Last Updated: 2025-04-25T19:49:01.022Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Internet Pass-Thru Problem Types: CWE-532 Description: IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6838559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231370
CVE ID: CVE-2022-35720 State: PUBLISHED Published: 2023-02-08T18:24:03.263Z Last Updated: 2025-03-25T13:55:49.443Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling External Authentication Server, Sterling Secure Proxy Problem Types: CWE-327 Description: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890669 - https
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890669 - https://www.ibm.com/support/pages/node/6890663
CVE ID: CVE-2022-35721 State: PUBLISHED Published: 2022-09-23T17:35:16.145Z Last Updated: 2025-05-22T18:18:23.672Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/S:C/I:L/AC:L/UI:N/PR:L/C:L/AV:N/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
IBM X-Force ID: 231380. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6695811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231380