Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4940 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034102 - http://www-01.ibm.com/support/docview.wss?uid=swg21969202
CVE ID: CVE-2015-4941 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T06:32:31.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79690 - http://www.securitytracker.com/id/1034580 - http://www-01.ibm.com/support/docview.wss?uid=swg21972019
CVE ID: CVE-2015-4942 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:31.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4943. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034698 - http://www-01.ibm.com/support/docview.wss?uid=swg21974169
CVE ID: CVE-2015-4943 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T06:32:31.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21972021 - http://www.securityfocus.com/bid/79689 - http://www.securitytracker.com/id/1034581
CVE ID: CVE-2015-4944 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX003 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Conta
henticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963973
CVE ID: CVE-2015-4945 State: PUBLISHED Published: 2015-07-26T14:00:00 Last Updated: 2024-08-06T06:32:31.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21962601
CVE ID: CVE-2015-4946 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T06:32:31.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS
d 6.x before 6.0.1; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Engineering Lifecycle Manager (RELM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; Rational Rhapsody Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; and Rational Software Architect Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1 allows local users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/suppo
ns via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973404
CVE ID: CVE-2015-4947 State: PUBLISHED Published: 2015-09-15T15:00:00 Last Updated: 2024-08-06T06:32:31.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965419 - http://www.securityfocus.com/bid/76658 - http://www-01.ibm.com/support/docview.wss?u
pport/docview.wss?uid=swg21965419 - http://www.securityfocus.com/bid/76658 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI45596 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44793 - http://www.securitytracker.com/id/1033512
CVE ID: CVE-2015-4948 State: PUBLISHED Published: 2015-10-16T01:00:00 Last Updated: 2024-08-06T06:32:31.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV77299 - http://aix.software.ibm.com/aix/efixes/security/netstat_advisory.asc - http://www.securitytracker.com/id/1033806 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV75940
CVE ID: CVE-2015-4949 State: PUBLISHED Published: 2015-08-23T01:00:00 Last Updated: 2024-08-06T06:32:31.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 7.1 before 7.1.2, and Tivoli Storage FlashCopy Manager 4.1 before 4.1.2 place cleartext passwords in exception messages, which allows physically proximate attackers to obtain sensitive information by reading GUI pop-up windows, a different vulnerability than CVE-2015-6557. Additional Analyst Notes: - CVE Program Container: References: - http://www-01
fferent vulnerability than CVE-2015-6557. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03480 - http://www-01.ibm.com/support/docview.wss?uid=swg21963630 - http://www.securitytracker.com/id/1033270
CVE ID: CVE-2015-4950 State: PUBLISHED Published: 2015-08-23T14:00:00 Last Updated: 2024-08-06T06:32:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.1; and Tivoli Storage Manager FastBack for Microsoft Exchange 6.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtai
.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtain sensitive information via a duplicate alias name. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04252 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04251 - http://www-01.ibm.com/support/docview.wss?uid=swg21963629 - http://www.securitytracker.com/id/1033652
CVE ID: CVE-2015-4951 State: PUBLISHED Published: 2016-01-20T02:00:00 Last Updated: 2024-08-06T06:32:31.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034692 - http://www-01.ibm.com/support/docview.wss?uid=swg21973484
CVE ID: CVE-2015-4952 State: PUBLISHED Published: 2018-03-29T18:00:00 Last Updated: 2024-08-06T06:32:31.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21962602
CVE ID: CVE-2015-4953 State: PUBLISHED Published: 2018-03-29T18:00:00 Last Updated: 2024-08-06T06:32:31.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a weakness in its encryption protocol. IBM X-Force ID: 105197. Additional Analyst Notes: - CVE Program Container: References: - https://www-304.ibm.com/support/docview.wss?uid=swg21972041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/105197 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV81388
CVE ID: CVE-2015-4954 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-06T06:32:31.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/105200 - http://www-01.ibm.com/support/docview.wss?uid=swg21972042
CVE ID: CVE-2015-4955 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T06:32:32.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966010 - http://www.securitytracker.com/id/1033733 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR53179 - http://www-01.ibm.com/support/docv
ytracker.com/id/1033733 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR53179 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54007 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52696
CVE ID: CVE-2015-4956 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T06:32:31.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967649
CVE ID: CVE-2015-4957 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T06:32:32.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967631
CVE ID: CVE-2015-4958 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T06:32:32.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971545
CVE ID: CVE-2015-4959 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:31.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034697 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV77558 - http://www-01.ibm.com/support/docview.wss?uid=swg21974157
CVE ID: CVE-2015-4960 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T06:32:31.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971545
CVE ID: CVE-2015-4961 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-06T06:32:32.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 does not encrypt connections between internal servers, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965077 - http://www.securityfocus.com
rogram Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965077 - http://www.securityfocus.com/bid/94976
CVE ID: CVE-2015-4962 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T06:32:31.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.
al Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Engineering Lifecycle Manager (RELM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; Rational Rhapsody Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; and Rational Software Architect Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1 uses weak permissions for unspecified project areas, which allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: Refe
cated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973404
CVE ID: CVE-2015-4963 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034103 - http://www-01.ibm.com/support/docview.wss?uid=swg21964828 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV71196
CVE ID: CVE-2015-4964 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21964623
CVE ID: CVE-2015-4965 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to obtain sensitive information by reading a (1) backup or (2) debug application file. Additi
remote authenticated users to obtain sensitive information by reading a (1) backup or (2) debug application file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966194
CVE ID: CVE-2015-4966 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products have a default administrator account, which makes it easier for remote authenticated users to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Cont
er for remote authenticated users to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21968191
CVE ID: CVE-2015-4967 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:32.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Refere
ers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966181
CVE ID: CVE-2015-4968 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-4971 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Strategic Supply Management Platform and Emptoris Program Management 10.x before 10.0.1.4_iFix3, 10.0.2.x before 10.0.2.7_iFix1, 10.0.3.x before 10.0.3.2, and 10.0.4.x before 10.0.4.0_iFix1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966754
CVE ID: CVE-2015-4973 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21964806 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10705
CVE ID: CVE-2015-4974 State: PUBLISHED Published: 2015-10-26T01:00:00 Last Updated: 2024-08-06T06:32:31.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366 - http://www.securitytracker.com/id/1035094 - http://www.securityfocus.com/bid/77025 - http://www-01.ibm.com/support/docview.wss?uid=swg21972152
CVE ID: CVE-2015-4980 State: PUBLISHED Published: 2015-09-14T22:00:00 Last Updated: 2024-08-06T06:32:31.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote authenticated users to obtain sensitive personal information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965013 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54107 - http://www.securitytracker.com/id/1033447
CVE ID: CVE-2015-4981 State: PUBLISHED Published: 2015-10-26T01:00:00 Last Updated: 2024-08-06T06:32:31.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366 - http://www.securityfocus.com/bid/77027 - http://www.securitytracker.com/id/1035094 - http://www-01.ibm.com/support/docview.wss?uid=swg21972152