Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3970 State: PUBLISHED Published: 2013-06-13T00:00:00Z Last Updated: 2024-09-17T01:46:59.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging control over that test CA. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/JSA10571
CVE ID: CVE-2013-3971 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84848 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV37459 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-3972 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV39089 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84849
CVE ID: CVE-2013-3973 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:30:49.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV39184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84850
CVE ID: CVE-2013-3975 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84855 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3976 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T16:30:49.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore. Ad
opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84881 - http://www-01.ibm.com/support/docview.wss?uid=swg21644407
CVE ID: CVE-2013-3977 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84901 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3978 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T16:30:49.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prevent unwanted caching by a web browser, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84902 - http://www-01.ibm.com/support/docview.wss?uid=swg21662928
CVE ID: CVE-2013-3979 State: PUBLISHED Published: 2013-07-24T14:00:00 Last Updated: 2024-08-06T16:30:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 - http://www.securityfocus.com/bid/61419
ker.com/id/1028829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 - http://www.securityfocus.com/bid/61419 - http://www-01.ibm.com/support/docview.wss?uid=swg21643067 - http://secunia.com/advisories/54286
CVE ID: CVE-2013-3980 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room unusability) by generating a large number of fictitious users to enter a meeting room. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21671201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84906
CVE ID: CVE-2013-3981 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avatar photos of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84907 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3982 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspecified installation information and technical data via a request to a public page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84908 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3983 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T16:30:49.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84966 - http://www-01.ibm.com/support/docview.wss?uid=swg21662928
CVE ID: CVE-2013-3984 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:30:49.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84967 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3985 State: PUBLISHED Published: 2013-11-09T01:00:00 Last Updated: 2024-08-06T16:30:48.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84968
CVE ID: CVE-2013-3986 State: PUBLISHED Published: 2013-11-08T15:00:00 Last Updated: 2024-08-06T16:30:49.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84969
CVE ID: CVE-2013-3988 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T16:30:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84973
CVE ID: CVE-2013-3989 State: PUBLISHED Published: 2013-10-25T20:00:00 Last Updated: 2024-08-06T16:30:49.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84975 - http://www-01.ibm.com/support/docview.wss?uid=swg21653287
CVE ID: CVE-2013-3990 State: PUBLISHED Published: 2013-08-09T19:00:00 Last Updated: 2024-08-06T16:30:49.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN98FLQ2. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21644599 - http://www-01.ibm.com/support/docview.wss?uid=swg21645503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84971
CVE ID: CVE-2013-3992 State: PUBLISHED Published: 2013-08-05T20:00:00 Last Updated: 2024-08-06T16:30:49.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84981 - http://www.securityfocus.com/bid/61604 - http://osvdb.org/95943 - http://www-01.ibm.com/support/docview.wss?uid=swg21645804 - http://www.securitytracker.com/id/1028883 - http://secunia.com/advisories/54447
CVE ID: CVE-2013-3993 State: PUBLISHED Published: 2014-07-07T10:00:00.000Z Last Updated: 2025-10-22T00:05:37.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/59676 - http://www.securityfocus.com/bid/68449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 - http://www-01.ibm.com/support/docview.wss?uid=swg21677445
CVE ID: CVE-2013-3995 State: PUBLISHED Published: 2013-08-05T20:00:00 Last Updated: 2024-08-06T16:30:49.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61604 - http://www-01.ibm.com/support/docview.wss?uid=swg21645804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84984 - http://www.securitytracker.com/id/1028883 - http://secunia.com/advisories/54447
CVE ID: CVE-2013-3996 State: PUBLISHED Published: 2013-08-05T20:00:00 Last Updated: 2024-08-06T16:30:49.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61604 - http://www-01.ibm.com/support/docview.wss?uid=swg21645804 - http://www.securitytracker.com/id/1028883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84985 - http://secunia.com/advisories/54447
CVE ID: CVE-2013-3997 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T16:30:49.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21667812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84986 - http://www.securityfocus.com/bid/66360
CVE ID: CVE-2013-3998 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T16:30:49.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84987 - http://www-01.ibm.com/support/docview.wss?uid=swg21667812
CVE ID: CVE-2013-3999 State: PUBLISHED Published: 2013-07-24T14:00:00 Last Updated: 2024-08-06T16:30:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Social Media Analytics 1.2 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21644427 - http://www-01.ibm.com/support/docview.wss?uid=swg24034591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85253
CVE ID: CVE-2013-4000 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T16:30:49.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85150 - http://www-01.ibm.com/support/docview.wss?uid=swg21657932
CVE ID: CVE-2013-4001 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T16:30:49.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85151 - http://www-01.ibm.com/support/docview.wss?uid=swg21657932
CVE ID: CVE-2013-4002 State: PUBLISHED Published: 2013-07-23T10:00:00 Last Updated: 2024-08-06T16:30:49.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names. Additional A
r products allows remote attackers to cause a denial of service via vectors related to XML attribute names. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98015 - http://rhn.redhat.com/errata/RHSA-2013-1060.html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://rhn.redhat.com/errata/RHSA-2013-1447.html - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://rhn.redhat.com/errata/RHSA-2013-1440.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.securityfocus.com/bid/61310 - http://rhn.redhat.com/errata/RHSA-2015-0773.html - http://rhn.redhat
675.html - http://www.securityfocus.com/bid/61310 - http://rhn.redhat.com/errata/RHSA-2015-0773.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html - http://www.ubuntu.com/usn/USN-2033-1 - http://www.ubuntu.com/usn/USN-2089-1 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html - http://marc.info/?l=bugtraq&m=138674073720143&w=2 - http://rhn.redhat.com/errata/RHSA-2013-1505.html - http://marc.info/?l=bugtraq&m=138674031212883&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1822.html - http://secunia.com/advisories/56257 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.
1822.html - http://secunia.com/advisories/56257 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html - http://rhn.redhat.com/errata/RHSA-2013-1059.html - http://rhn.redhat.com/errata/RHSA-2014-1823.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-1081.html - https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org
s://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html - http://rhn.redhat.com/errata/RHSA-2013-1451.html - http://rhn.redhat.com/errata/RHSA-2014-1818.html - http://rhn.redhat.com/errata/RHSA-2014-1821.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85260 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6
5a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2022.html - http://www.ibm.com/support/docview.wss?uid=swg21648172 - http://www-01.ibm.com/support/docview.wss?uid=swg21657539 - https://issues.apache.org/jira/browse/XERCESJ-1679 - http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=965250&r2=1499506&view=patch - http://www-01.ibm.com/support/docview.wss?uid=swg21644197 - http://www-01.ibm.com/support/docview.wss?uid=swg21653371 - http://www.ibm.com/developerworks/java/jdk/alerts/
1644197 - http://www-01.ibm.com/support/docview.wss?uid=swg21653371 - http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013 - http://support.apple.com/kb/HT5982 - https://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_filenet_content_manager_and_ibm_content_foundation_xml_4j_denial_of_service_attack_cve_2013_4002 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html
CVE ID: CVE-2013-4003 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T16:30:49.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/default/actionHandler/queryHandler.jsp, or (3) unspecified input in a portalSectionId action to html/en/default/reportTemplate/hGridTopQuery.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=sw
y.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21646694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85266 - https://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_tririga_application_platform_has_potential_cross_site_scripting_vulnerabilities_in_various_url_s
CVE ID: CVE-2013-4004 State: PUBLISHED Published: 2013-08-21T21:00:00 Last Updated: 2024-08-06T16:30:49.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85268 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM81571 - http://www.securityfocus.com/bid/
view.wss?uid=swg21644047 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM81571 - http://www.securityfocus.com/bid/61935