Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0914 State: PUBLISHED Published: 2014-07-30T10:00:00 Last Updated: 2024-08-06T09:27:20.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
uery Description Field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68839 - http://secunia.com/advisories/59640 - http://www.securityfocus.com/archive/1/533110/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21678885 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV56679 - http://secunia.com/advisories/59570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91883
CVE ID: CVE-2014-0915 State: PUBLISHED Published: 2014-07-30T10:00:00 Last Updated: 2024-08-06T09:27:20.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field. Addition
ticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21678894 - http://secunia.com/advisories/59640 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV56680 - http://www.securityfocus.com/archive/1/533110/100/0/threaded - http://secunia.com/advisories/59570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91884
CVE ID: CVE-2014-0917 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:34:39.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67339 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125 - http://www-01.ibm.com/support/docview.wss?uid=swg21670753 - https://exchang
bm.com/support/docview.wss?uid=swg1PI14125 - http://www-01.ibm.com/support/docview.wss?uid=swg21670753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91979
CVE ID: CVE-2014-0918 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:34:39.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125 - http://www.securityfocus.com/bid/67340 - http://www-01.ibm.com/support/docview.wss?uid=swg21670753 - https://exchange.xforce.ibmcloud.com/
yfocus.com/bid/67340 - http://www-01.ibm.com/support/docview.wss?uid=swg21670753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91980
CVE ID: CVE-2014-0919 State: PUBLISHED Published: 2015-05-08T01:00:00 Last Updated: 2024-08-06T09:34:39.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07553 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07554 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07547 - http://www
-01.ibm.com/support/docview.wss?uid=swg1IT07554 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07547 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07552 - http://www.securitytracker.com/id/1032247 - http://www.securityfocus.com/bid/74217 - http://www-01.ibm.com/support/docview.wss?uid=swg21698021 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07397
CVE ID: CVE-2014-0920 State: PUBLISHED Published: 2014-04-10T23:00:00 Last Updated: 2024-08-06T09:34:39.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92073 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527 - http://www-01.ibm.com/support/docview.wss?uid=swg21669506
CVE ID: CVE-2014-0921 State: PUBLISHED Published: 2014-04-15T23:00:00 Last Updated: 2024-08-06T09:34:39.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets connection upgrade. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92074 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98583
CVE ID: CVE-2014-0922 State: PUBLISHED Published: 2014-04-15T23:00:00 Last Updated: 2024-08-06T09:34:39.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (resource consumption) via WebSockets MQ Telemetry Transport (MQTT) data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92075 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98692 - http://www-01.ibm.com/support/docview.wss?uid=swg21670278
CVE ID: CVE-2014-0923 State: PUBLISHED Published: 2014-04-15T23:00:00 Last Updated: 2024-08-06T09:34:39.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92076 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00582 - http://www-01.ibm.com/support/docview.wss?uid=swg21670278
CVE ID: CVE-2014-0924 State: PUBLISHED Published: 2014-04-15T23:00:00 Last Updated: 2024-08-06T09:34:39.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not verify that all of the characters of a password are correct, which makes it easier for remote authenticated users to bypass intended access restrictions by leveraging knowledge of a password substring. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670278 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92077
CVE ID: CVE-2014-0925 State: PUBLISHED Published: 2014-05-30T21:00:00 Last Updated: 2024-08-06T09:34:40.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92078 - http://www-01.ibm.com/support/docview.wss?uid=swg21673004
CVE ID: CVE-2014-0927 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:34:39.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging knowledge of the port number and webapp path. IBM X-Force ID: 92259. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92259 - http://www-01.ibm.com/support/docview.wss?uid=swg21674739
CVE ID: CVE-2014-0929 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T09:34:39.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92261 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO79622 - http://www-01.ibm.com/support/docview.wss?uid=swg21668509
CVE ID: CVE-2014-0930 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T09:34:40.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel memory via a crafted PT_LDINFO operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV59675 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0930/ - http://www.ibm.com/support/docview.wss?uid=isg1IV59045 - http://archives.neohapsis.com/
rity-advisories/cve-2014-0930/ - http://www.ibm.com/support/docview.wss?uid=isg1IV59045 - http://archives.neohapsis.com/archives/bugtraq/2014-05/0031.html - http://www.ibm.com/support/docview.wss?uid=isg1IV58766 - http://www.ibm.com/support/docview.wss?uid=isg1IV58888 - http://www.ibm.com/support/docview.wss?uid=isg1IV58948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92262 - http://www.ibm.com/support/docview.wss?uid=isg1IV58861 - http://www.ibm.com/support/docview.wss?uid=isg1IV58840 - http://aix.software.ibm.com/aix/efixes/security/ptrace_advisory.asc
CVE ID: CVE-2014-0931 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:34:40.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263. Additional Analyst Notes: - CVE Program Con
service or access other servers via crafted XML data. IBM X-Force ID: 92263. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92263 - http://www-01.ibm.com/support/docview.wss?uid=swg21668868
CVE ID: CVE-2014-0932 State: PUBLISHED Published: 2014-04-21T22:00:00 Last Updated: 2024-08-06T09:34:39.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21670912 - http://www.securityfocus.com/bid/66993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92264 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT00419
CVE ID: CVE-2014-0933 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:34:39.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92273 - http://www-01.ibm.com/support/docview.wss?uid=swg21671141 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49605
CVE ID: CVE-2014-0935 State: PUBLISHED Published: 2014-06-04T10:00:00 Last Updated: 2024-08-06T09:34:39.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related to events. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92298
CVE ID: CVE-2014-0936 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T09:34:41.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92317 - http://www-01.ibm.com/support/docview.wss?uid=swg21674750
CVE ID: CVE-2014-0940 State: PUBLISHED Published: 2014-10-07T10:00:00 Last Updated: 2024-08-06T09:34:39.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92381 - http://www.securityfocus.com/bid/70247 - http://www-01.ibm.com/support/docview.wss?uid=sw
ud.com/vulnerabilities/92381 - http://www.securityfocus.com/bid/70247 - http://www-01.ibm.com/support/docview.wss?uid=swg21686189 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175
CVE ID: CVE-2014-0941 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:34:39.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21671686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92400
CVE ID: CVE-2014-0942 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T09:34:40.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92401 - http://www-01.ibm.com/support/docview.wss?uid=swg21671686
CVE ID: CVE-2014-0943 State: PUBLISHED Published: 2014-05-25T22:00:00 Last Updated: 2024-08-06T09:34:39.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21671377 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49881 - http://www.securitytracker.com/id/1030284 - http://www-01.ibm.com/support/
ibm.com/support/docview.wss?uid=swg1JR49881 - http://www.securitytracker.com/id/1030284 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92402
CVE ID: CVE-2014-0944 State: PUBLISHED Published: 2014-05-09T10:00:00 Last Updated: 2024-08-06T09:34:40.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92559 - http://www-01.ibm.com/support/docview.wss?uid=swg21671324
CVE ID: CVE-2014-0945 State: PUBLISHED Published: 2014-05-09T10:00:00 Last Updated: 2024-08-06T09:34:40.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92562 - http://www-01.ibm.com/support/docview.wss?uid=swg21671324
CVE ID: CVE-2014-0946 State: PUBLISHED Published: 2014-05-09T10:00:00 Last Updated: 2024-08-06T09:34:40.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21671324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92573
CVE ID: CVE-2014-0947 State: PUBLISHED Published: 2014-07-30T10:00:00 Last Updated: 2024-08-06T09:34:41.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92620 - http://www-01.ibm.com/support/docview.wss?uid=swg21678323
CVE ID: CVE-2014-0948 State: PUBLISHED Published: 2014-07-30T10:00:00 Last Updated: 2024-08-06T09:34:40.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21678323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92621
CVE ID: CVE-2014-0949 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:40.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a crafted web request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92622 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI15692
CVE ID: CVE-2014-0950 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-06T09:34:40.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview
-Force ID: 92623. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21675164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92623
CVE ID: CVE-2014-0951 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:40.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI15690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92624
CVE ID: CVE-2014-0952 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:41.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in boot_config.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF28, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92625 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16041