Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20451 State: PUBLISHED Published: 2024-05-03T18:16:24.867Z Last Updated: 2024-08-03T17:37:24.306Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: IBM Products: Cognos Controller Problem Types: CWE-89 Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 196643. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmclou
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196643
CVE ID: CVE-2021-20453 State: PUBLISHED Published: 2021-04-20T11:35:14.771935Z Last Updated: 2024-09-17T02:17:09.676Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:U/PR:N/UI:N/AC:L/I:N/C:H/A:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445171 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196648
CVE ID: CVE-2021-20454 State: PUBLISHED Published: 2021-04-21T12:05:20.721888Z Last Updated: 2024-09-16T17:33:20.448Z Severity: HIGH (CVSS 8.2 CVSS:3.0/I:N/PR:N/AC:L/A:L/UI:N/AV:N/S:U/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445481 - http
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196649
CVE ID: CVE-2021-20455 State: PUBLISHED Published: 2025-01-07T16:04:37.010Z Last Updated: 2025-01-07T16:58:53.303Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Controller, Cognos Controller Problem Types: CWE-209 Description: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179163
CVE ID: CVE-2021-20461 State: PUBLISHED Published: 2021-06-30T13:25:12.039304Z Last Updated: 2024-09-16T22:30:55.251Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/C:N/A:N/I:L/AC:L/PR:L/UI:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466729 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196770 - https://security.netapp.com/advisory/ntap-20210720-0007/
CVE ID: CVE-2021-20464 State: PUBLISHED Published: 2022-04-22T16:30:29.386454Z Last Updated: 2024-09-16T20:32:28.158Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:N/AC:L/S:U/A:H/UI:N/AV:N/PR:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Denial of Service Description: IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196813 - https://security.netapp.com/advisory/ntap-20220602-
0957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196813 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-20468 State: PUBLISHED Published: 2022-09-01T19:00:25.473635Z Last Updated: 2024-09-16T16:48:06.187Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/I:L/AV:N/C:N/A:N/UI:R/S:U/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 196825. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196825
erences: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196825 - https://security.netapp.com/advisory/ntap-20221014-0005/
CVE ID: CVE-2021-20470 State: PUBLISHED Published: 2021-12-03T17:00:22.867476Z Last Updated: 2024-09-17T03:17:46.936Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/S:U/AC:H/I:N/AV:N/A:N/PR:N/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196939 - https://security.netapp.com/advisor
t/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196939 - https://security.netapp.com/advisory/ntap-20211223-0006/
CVE ID: CVE-2021-20473 State: PUBLISHED Published: 2021-10-07T18:05:48.587763Z Last Updated: 2024-09-16T16:23:49.976Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/AC:L/PR:L/AV:N/UI:N/A:L/C:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Gain Privileges Description: IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196944
CVE ID: CVE-2021-20474 State: PUBLISHED Published: 2021-07-07T16:30:35.145141Z Last Updated: 2024-09-17T02:28:00.680Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/S:U/A:N/AV:N/PR:N/I:L/UI:N/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Guardium Data Encryption Problem Types: Gain Access Description: IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196945
CVE ID: CVE-2021-20477 State: PUBLISHED Published: 2021-06-29T15:50:19.234407Z Last Updated: 2024-09-17T01:47:06.915Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/AC:L/C:L/AV:N/UI:R/PR:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6462331 - https:
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6462331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196949
CVE ID: CVE-2021-20478 State: PUBLISHED Published: 2021-07-20T17:10:14.951787Z Last Updated: 2024-09-16T19:14:53.437Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/A:N/I:N/C:L/AV:L/AC:L/UI:N/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Obtain Information Description: IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6473065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197497
CVE ID: CVE-2021-20479 State: PUBLISHED Published: 2022-05-09T16:35:18.335966Z Last Updated: 2024-09-17T03:38:16.876Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/I:N/UI:N/PR:N/AC:H/S:U/A:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak System Problem Types: Obtain Information Description: IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197498. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197498
CVE ID: CVE-2021-20480 State: PUBLISHED Published: 2021-04-08T12:20:13.914296Z Last Updated: 2024-09-16T18:43:21.112Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/PR:L/S:U/I:N/UI:N/AV:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441063 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197502
CVE ID: CVE-2021-20481 State: PUBLISHED Published: 2021-10-07T18:05:50.355462Z Last Updated: 2024-09-16T16:27:36.976Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/I:L/PR:L/AC:L/C:L/S:C/UI:R/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197503. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 197503. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197503
CVE ID: CVE-2021-20482 State: PUBLISHED Published: 2021-03-30T16:00:27.881507Z Last Updated: 2024-09-16T16:18:10.026Z Severity: HIGH (CVSS 7.1 CVSS:3.0/S:U/PR:L/I:N/AC:L/UI:N/A:L/AV:N/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Automation Problem Types: Obtain Information Description: IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197504. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437577 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6437577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197504
CVE ID: CVE-2021-20483 State: PUBLISHED Published: 2021-06-16T16:15:18.128243Z Last Updated: 2024-09-16T23:21:08.138Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/S:U/A:N/I:L/C:N/AV:N/PR:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464081 - https://exchange.xforce.ibmcloud.com/vulnerabili
ntainer: References: - https://www.ibm.com/support/pages/node/6464081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197591
CVE ID: CVE-2021-20484 State: PUBLISHED Published: 2021-09-23T17:10:33.935977Z Last Updated: 2024-09-16T22:16:09.731Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/C:L/I:L/AC:L/A:N/PR:L/S:C/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197666. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 197666. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197666
CVE ID: CVE-2021-20485 State: PUBLISHED Published: 2021-09-23T17:10:35.541826Z Last Updated: 2024-09-17T02:00:37.438Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/AV:N/S:U/I:N/C:L/UI:N/AC:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197667. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491645 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197667
CVE ID: CVE-2021-20486 State: PUBLISHED Published: 2021-05-26T16:20:17.082244Z Last Updated: 2024-09-16T21:04:23.819Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/AC:H/I:N/UI:N/AV:N/C:H/A:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Data Problem Types: Obtain Information Description: IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6456033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197668
CVE ID: CVE-2021-20487 State: PUBLISHED Published: 2021-05-26T16:20:17.769926Z Last Updated: 2024-09-16T18:33:23.529Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/UI:N/I:H/AC:H/PR:H/S:C/A:H/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Power 9 Systems Problem Types: Gain Privileges Description: IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature verification process. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197730
CVE ID: CVE-2021-20488 State: PUBLISHED Published: 2021-06-16T16:15:19.775153Z Last Updated: 2024-09-17T03:53:52.185Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/C:H/PR:L/UI:N/A:H/S:U/AC:H/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464081 - https://exchange.xforce.ibm
tes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197789
CVE ID: CVE-2021-20489 State: PUBLISHED Published: 2021-10-07T18:05:52.087850Z Last Updated: 2024-09-16T18:13:18.082Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/PR:N/AC:L/AV:N/UI:R/A:N/C:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Gain Access Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 197790. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6496777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197790
CVE ID: CVE-2021-20490 State: PUBLISHED Published: 2021-06-29T15:50:20.821596Z Last Updated: 2024-09-16T21:04:08.621Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/AC:L/S:U/C:N/AV:L/UI:N/PR:N/A:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Denial of Service Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197791
CVE ID: CVE-2021-20491 State: PUBLISHED Published: 2021-04-16T15:40:15.491662Z Last Updated: 2024-09-16T19:15:42.203Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/I:N/A:H/UI:N/C:N/S:U/AV:L/AC:L/PR:H/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Server Problem Types: Denial of Service Description: IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
rash. IBM X-Force ID: 197792. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6442993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197792
CVE ID: CVE-2021-20492 State: PUBLISHED Published: 2021-05-26T16:20:18.402980Z Last Updated: 2024-09-16T17:15:21.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/C:H/A:L/I:N/AC:H/PR:N/AV:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/n
X-Force ID: 197793. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6456017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197793
CVE ID: CVE-2021-20493 State: PUBLISHED Published: 2021-12-03T17:00:24.294064Z Last Updated: 2024-09-16T23:46:52.118Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/S:C/AC:L/A:N/PR:N/I:L/AV:N/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/652051
: 197794. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197794 - https://security.netapp.com/advisory/ntap-20211223-0006/
CVE ID: CVE-2021-20494 State: PUBLISHED Published: 2021-06-28T16:10:19.260074Z Last Updated: 2024-09-17T02:47:00.739Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:N/C:N/AC:L/AV:N/UI:N/A:H/PR:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Adapters Problem Types: Denial of Service Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com/vulnerabil
ontainer: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197882
CVE ID: CVE-2021-20496 State: PUBLISHED Published: 2021-07-15T17:15:47.288197Z Last Updated: 2024-09-16T20:36:29.842Z Severity: LOW (CVSS 2.7 CVSS:3.0/S:U/I:L/UI:N/C:N/PR:H/AV:N/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Bypass Security Description: IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation. IBM X-Force ID: 197966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197966
CVE ID: CVE-2021-20497 State: PUBLISHED Published: 2021-07-15T17:15:48.911848Z Last Updated: 2024-09-17T01:30:38.400Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/C:H/UI:N/I:N/S:U/AC:H/AV:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197969 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/197969