Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4382 State: PUBLISHED Published: 2019-06-25T15:45:30.286491Z Last Updated: 2024-09-17T01:01:38.280Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/C:L/AV:N/I:N/AC:L/UI:N/PR:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162162 - http://www.securityfocus.com/bid/10889
s?uid=ibm10886747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162162 - http://www.securityfocus.com/bid/108893
CVE ID: CVE-2019-4383 State: PUBLISHED Published: 2019-07-01T15:05:38.380784Z Last Updated: 2024-09-16T17:54:46.792Z Severity: HIGH (CVSS 7.9 CVSS:3.0/S:C/A:N/PR:H/C:H/AC:L/AV:L/I:H/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162165 - http://www.securit
m/support/docview.wss?uid=ibm10886111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162165 - http://www.securityfocus.com/bid/109003
CVE ID: CVE-2019-4384 State: PUBLISHED Published: 2019-06-19T13:30:19.794040Z Last Updated: 2024-09-17T01:31:41.663Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/PR:L/A:N/AC:L/UI:N/C:L/I:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Campaign Problem Types: Obtain Information Description: IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887817 - https://exchange.xforce.ibmcloud.com/vuln
ainer: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162172 - http://www.securityfocus.com/bid/108896
CVE ID: CVE-2019-4385 State: PUBLISHED Published: 2019-06-19T13:30:19.838289Z Last Updated: 2024-09-16T19:40:06.507Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/C:H/S:C/AV:L/PR:N/AC:H/A:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162173
: - http://www.ibm.com/support/docview.wss?uid=ibm10886099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162173 - http://www.securityfocus.com/bid/108899
CVE ID: CVE-2019-4386 State: PUBLISHED Published: 2019-07-01T15:05:38.433202Z Last Updated: 2024-09-17T03:43:26.459Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/I:N/AV:N/AC:L/C:N/PR:L/A:H/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID: 162714. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162174 - http://www.securityfo
upport/docview.wss?uid=ibm10886809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162174 - http://www.securityfocus.com/bid/109019
CVE ID: CVE-2019-4387 State: PUBLISHED Published: 2019-11-26T15:46:18.539212Z Last Updated: 2024-09-17T02:26:29.221Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/I:L/C:L/S:U/AV:N/UI:N/A:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 162715. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1115109 - h
715. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1115109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162175
CVE ID: CVE-2019-4388 State: PUBLISHED Published: 2019-12-18T12:57:27 Last Updated: 2024-08-04T19:33:37.941Z Vendors: HCL Products: AppScan Source Problem Types: Cross-Site Scripting Description: HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI. Additional Analyst Notes: - CVE Program Container: References: - https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0074364
CVE ID: CVE-2019-4391 State: PUBLISHED Published: 2020-04-07T15:12:23 Last Updated: 2024-08-04T19:33:38.273Z Vendors: n/a Products: HCL AppScan Standard Edition Problem Types: "XML External Entity Injection" Description: HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0077917
CVE ID: CVE-2019-4392 State: PUBLISHED Published: 2020-02-14T21:10:08 Last Updated: 2024-08-04T19:33:37.900Z Vendors: IBM Corporation Products: HCL AppScan Standard Edition Problem Types: Broken authentication Description: HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0075661
CVE ID: CVE-2019-4393 State: PUBLISHED Published: 2020-04-07T15:14:27 Last Updated: 2024-08-04T19:33:37.950Z Vendors: n/a Products: HCL AppScan Standard Edition Problem Types: "Broken Authentication" Description: HCL AppScan Standard is vulnerable to excessive authorization attempts Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0077916
CVE ID: CVE-2019-4394 State: PUBLISHED Published: 2019-10-25T16:30:35.128736Z Last Updated: 2024-09-17T00:26:43.226Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:L/I:L/PR:H/A:N/UI:N/S:U/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Orchestrator Problem Types: Bypass Security Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1097301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162232
CVE ID: CVE-2019-4395 State: PUBLISHED Published: 2019-10-25T16:30:35.631112Z Last Updated: 2024-09-17T00:45:33.217Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/C:L/A:N/UI:N/AC:L/I:N/AV:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Orchestrator Problem Types: Obtain Information Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files. IBM X-Force ID: 162333. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1097175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162233
CVE ID: CVE-2019-4396 State: PUBLISHED Published: 2019-10-25T16:30:36.075959Z Last Updated: 2024-09-17T01:16:48.772Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/I:L/PR:L/A:N/UI:R/C:L/S:C/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Orchestrator Problem Types: Gain Access Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning
response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 162236. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162236
CVE ID: CVE-2019-4397 State: PUBLISHED Published: 2019-10-24T12:00:37.660170Z Last Updated: 2024-09-17T01:01:14.329Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/UI:N/S:U/PR:L/C:H/A:N/I:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Orchestrator Problem Types: Obtain Information Description: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162239 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
story. IBM X-Force ID: 162239 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162239
CVE ID: CVE-2019-4398 State: PUBLISHED Published: 2019-10-24T12:00:38.147717Z Last Updated: 2024-09-17T02:36:56.577Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/AV:L/A:N/C:L/S:U/PR:N/AC:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Orchestrator Problem Types: Obtain Information Description: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162259
CVE ID: CVE-2019-4399 State: PUBLISHED Published: 2019-10-25T16:30:36.509454Z Last Updated: 2024-09-16T23:42:07.551Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/AC:H/PR:N/S:U/C:H/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Orchestrator Problem Types: Obtain Information Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 162260. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1097307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162260
CVE ID: CVE-2019-4400 State: PUBLISHED Published: 2019-10-25T16:30:37.011924Z Last Updated: 2024-09-17T01:36:18.684Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/I:N/PR:L/C:L/S:U/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Orchestrator Problem Types: Obtain Information Description: IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162261. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077129 - h
261. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162261
CVE ID: CVE-2019-4402 State: PUBLISHED Published: 2019-08-20T18:25:26.662144Z Last Updated: 2024-09-16T19:56:47.117Z Severity: HIGH (CVSS 8.6 CVSS:3.0/A:H/C:N/AC:L/AV:N/S:C/PR:N/I:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Denial of Service Description: IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10958193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162263
CVE ID: CVE-2019-4403 State: PUBLISHED Published: 2019-06-14T14:45:18.106058Z Last Updated: 2024-09-17T00:46:24.965Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/A:N/I:L/AV:N/C:L/AC:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Connections Problem Types: Cross-Site Scripting Description: IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162264. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886079 - https://exch
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162264
CVE ID: CVE-2019-4406 State: PUBLISHED Published: 2019-11-25T17:01:24.440722Z Last Updated: 2024-09-17T02:11:17.801Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/PR:H/AC:L/I:N/C:N/A:H/S:U/AV:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Backup-Archive Client Problem Types: Denial of Service Description: IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1107777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162477
CVE ID: CVE-2019-4409 State: PUBLISHED Published: 2019-10-18T19:28:38 Last Updated: 2024-08-04T19:33:38.071Z Vendors: HCL Products: HCL Traveler Problem Types: Cross-site scripting Description: HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entered file name. If the file name is not escaped in the returned error page, it could expose a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
se a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0073231
CVE ID: CVE-2019-4410 State: PUBLISHED Published: 2019-07-01T15:05:38.491762Z Last Updated: 2024-09-16T20:36:39.051Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/C:L/PR:L/AV:N/AC:L/I:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162657. Additional Analyst Notes: - CVE Program Container: References:
closure within a trusted session. IBM X-Force ID: 162657. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10888037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162657 - http://www.securityfocus.com/bid/108993
CVE ID: CVE-2019-4411 State: PUBLISHED Published: 2019-11-09T01:41:07.777945Z Last Updated: 2024-09-17T01:41:59.622Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/A:N/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1086123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162658
CVE ID: CVE-2019-4412 State: PUBLISHED Published: 2019-11-09T01:41:08.188340Z Last Updated: 2024-09-16T17:34:22.668Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/AV:N/S:U/C:L/A:N/UI:N/PR:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Controller Problem Types: Obtain Information Description: IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162659. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1086123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162659
CVE ID: CVE-2019-4415 State: PUBLISHED Published: 2019-07-25T14:30:21.128065Z Last Updated: 2024-09-16T23:16:50.754Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:L/I:L/C:L/A:L/UI:N/PR:N/AC:H/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Private Problem Types: Gain Privileges Description: IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security context constraints. IBM X-Force ID: 162706. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10887857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162706
CVE ID: CVE-2019-4419 State: PUBLISHED Published: 2019-08-20T18:25:26.712928Z Last Updated: 2024-09-16T16:38:37.157Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/C:H/AC:L/AV:N/S:U/I:N/PR:L/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Intelligent Operations Center Problem Types: Obtain Information Description: IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10956
7. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10956433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162737
CVE ID: CVE-2019-4420 State: PUBLISHED Published: 2019-08-20T18:25:26.760594Z Last Updated: 2024-09-17T00:35:38.348Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/C:H/A:N/UI:N/I:N/PR:N/S:U/AV:L/RC:C/RL:O/E:U) Vendors: IBM Products: Intelligent Operations Center Problem Types: Obtain Information Description: IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 162738. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10956429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162738
CVE ID: CVE-2019-4422 State: PUBLISHED Published: 2019-10-03T14:05:17.804957Z Last Updated: 2024-09-16T18:09:11.611Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/UI:N/PR:L/AC:L/I:H/AV:N/C:H/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the accessmgr password. IBM X-Force ID: 162768. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/support/pages/node/957491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162768
CVE ID: CVE-2019-4423 State: PUBLISHED Published: 2019-09-30T15:20:32.446871Z Last Updated: 2024-09-16T18:18:12.007Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AV:N/I:N/UI:N/C:L/A:N/AC:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162769. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/957207 - https://exchange
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/957207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162769
CVE ID: CVE-2019-4424 State: PUBLISHED Published: 2019-08-20T19:30:25.574679Z Last Updated: 2024-09-17T03:55:04.241Z Severity: HIGH (CVSS 7.1 CVSS:3.0/S:U/AV:N/C:H/AC:L/PR:L/UI:N/I:N/A:L/RC:C/RL:O/E:U) Vendors: IBM Products: Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162770. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
ources. IBM X-Force ID: 162770. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162770
CVE ID: CVE-2019-4425 State: PUBLISHED Published: 2019-08-20T18:25:26.812353Z Last Updated: 2024-09-16T22:21:03.808Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AC:L/A:N/C:H/PR:L/I:N/UI:R/AV:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force ID: 162771. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959261 - https://exchange.xforce.ibmcloud.com/vuln
ainer: References: - https://www.ibm.com/support/docview.wss?uid=ibm10959261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162771
CVE ID: CVE-2019-4426 State: PUBLISHED Published: 2019-12-13T15:50:14.191652Z Last Updated: 2024-09-16T16:43:10.554Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/UI:R/S:C/C:L/I:L/AC:L/AV:N/RL:O/E:H/RC:C) Vendors: IBM Products: Business Automation Workflow, Case Manager Problem Types: Cross-Site Scripting Description: The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162772. Additional Analyst
lity potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162772. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1116087 - https://www.ibm.com/support/pages/node/1135552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162772