Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1487 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T17:03:11.451Z Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128626 - http://www.securityfocus.com/bid/102036 - http://www.ibm.com/support/docview.wss?uid=swg22010552
CVE ID: CVE-2017-1488 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-16T22:44:56.298Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Rational Quality Manager, Rational Collaborative Lifecycle Management, Rational Software Architect Design Manager, Rational Team Concert, Rational Rhapsody Design Manager Problem Types: Obtain Information Description: An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627. Additional Analyst Notes: - CVE Program Container: References: - h
l for information disclosure. IBM X-Force ID: 128627. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128627 - https://www-prd-trops.events.ibm.com/node/715709
CVE ID: CVE-2017-1489 State: PUBLISHED Published: 2017-08-28T20:00:00Z Last Updated: 2024-09-16T23:31:41.216Z Vendors: IBM Products: Security Access Manager for Web Problem Types: Gain Access Description: IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128687 - http://www.securityfocus.com/bid/100592 - http://www.securitytracker.com/id/1039227 - http://www.ibm.com/support/docview.wss
://www.securityfocus.com/bid/100592 - http://www.securitytracker.com/id/1039227 - http://www.ibm.com/support/docview.wss?uid=swg22006959
CVE ID: CVE-2017-1490 State: PUBLISHED Published: 2017-09-14T14:00:00Z Last Updated: 2024-09-17T04:09:19.391Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/128688 - http://www.securityfocus.com/bid/100835
CVE ID: CVE-2017-1491 State: PUBLISHED Published: 2017-09-05T21:00:00Z Last Updated: 2024-09-16T23:56:47.997Z Vendors: IBM Products: QRadar Network Security Problem Types: Obtain Information Description: IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/128689
CVE ID: CVE-2017-1493 State: PUBLISHED Published: 2018-01-09T20:00:00Z Last Updated: 2024-09-17T00:30:54.249Z Vendors: IBM Products: UrbanCode Deploy Problem Types: Data Manipulation Description: IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128691 - http://www.securityfocus.com/bid/102483 - http://www.ibm.com/support/docview.wss?uid=swg2C1000367
CVE ID: CVE-2017-1494 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T20:26:23.124Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128692. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102218 - http://www.securitytracker.com/id/1040355 - https://exchange.xforce.ibmcloud.com/vulner
w.securityfocus.com/bid/102218 - http://www.securitytracker.com/id/1040355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/128692 - http://www.ibm.com/support/docview.wss?uid=swg22008673
CVE ID: CVE-2017-1495 State: PUBLISHED Published: 2017-08-02T17:00:00Z Last Updated: 2024-09-17T03:38:30.699Z Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128693 - http://www.ibm.com/support/docview.wss?uid=swg22006068
CVE ID: CVE-2017-1496 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-17T02:51:46.667Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/128694 - http://www.ibm.com/support/docview.wss?uid=swg22006175
CVE ID: CVE-2017-1497 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T19:24:58.880Z Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010738 - http://www.securityfocus.com/bid/102187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/128695
CVE ID: CVE-2017-1498 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T17:37:54.912Z Vendors: IBM Products: Connections Problem Types: Cross-Site Scripting Description: IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129020 - http://www.ibm.com/support/docview.wss?uid=swg22006286
CVE ID: CVE-2017-1499 State: PUBLISHED Published: 2018-02-14T15:00:00Z Last Updated: 2024-09-17T00:16:20.442Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/129106 - http://www.ibm.com/support/docview.wss?uid=swg22012781
CVE ID: CVE-2017-1500 State: PUBLISHED Published: 2017-08-01T18:00:00Z Last Updated: 2024-09-17T01:26:19.842Z Vendors: IBM Products: Worklight Problem Types: Cross-Site Scripting Description: A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable parameter is "scope"; if you set as its value a "realm" not defined in authenticationConfig.xml, you get an HTTP 403 Forbidden response and the value will be reflected in the body of the HTTP response. By setting it to arbitrary JavaScript code it is possible to modify the flow of the authorization function, poten
ponse. By setting it to arbitrary JavaScript code it is possible to modify the flow of the authorization function, potentially leading to credential disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2C1000316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129404
CVE ID: CVE-2017-1501 State: PUBLISHED Published: 2017-08-18T15:00:00Z Last Updated: 2024-09-16T16:27:33.954Z Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/129576 - http://www.ibm.com/support/docview.wss?uid=swg22006810 - http://www.securityfocus.com/bid/100394 - http://www.securitytracker.com/id/1039199
CVE ID: CVE-2017-1502 State: PUBLISHED Published: 2017-09-07T16:00:00 Last Updated: 2024-08-05T13:32:30.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129577. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129577
CVE ID: CVE-2017-1503 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T13:32:30.267Z Vendors: IBM Products: IBM WebSphere Application Server Problem Types: XSS Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578. Additional Analyst Notes: - CVE Program Container: References: - http
ain sensitive information. IBM X-Force ID: 129578. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101234 - http://www.securitytracker.com/id/1039521 - http://www-01.ibm.com/support/docview.wss?uid=swg22006815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129578
CVE ID: CVE-2017-1504 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-16T16:23:00.923Z Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100137 - http://www.ibm.com/support/docview.wss?uid=swg22006803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129579
CVE ID: CVE-2017-1506 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-17T03:12:53.743Z Vendors: IBM Products: Cognos TM1 Problem Types: Cross-Site Scripting Description: IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129617. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129617 - http://www.ibm.com/support/docview.wss?uid=swg2201
02892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129617 - http://www.ibm.com/support/docview.wss?uid=swg22012623 - http://www.securitytracker.com/id/1040302
CVE ID: CVE-2017-1507 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-05T13:32:30.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129619
CVE ID: CVE-2017-1508 State: PUBLISHED Published: 2017-09-13T18:00:00Z Last Updated: 2024-09-17T02:42:45.697Z Vendors: IBM Products: Informix Servers Problem Types: Gain Privileges Description: IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006872 - http://www.securityfocus.com/bid/100820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129620
CVE ID: CVE-2017-1509 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-17T01:31:15.085Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Software Architect Design Manager, Rational Team Concert, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Rational Quality Manager Problem Types: Obtain Information Description: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719. Additional
in sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/129719 - https://www-prd-trops.events.ibm.com/node/715709
CVE ID: CVE-2017-1515 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-17T03:59:44.416Z Vendors: IBM Products: Rational DOORS Problem Types: Obtain Information Description: IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/129825 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - http://www.securityfocus.com/bid/102872
CVE ID: CVE-2017-1516 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T19:01:07.973Z Vendors: IBM Products: Rational DOORS Problem Types: Gain Access Description: IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/129826 - http://www.ibm.com/support/docview.wss?uid=swg22012789
- https://exchange.xforce.ibmcloud.com/vulnerabilities/129826 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - http://www.securityfocus.com/bid/102867
CVE ID: CVE-2017-1519 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-17T02:27:20.115Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039298 - http://www.securityfocus.com/bid/100688 - http://www.ibm.com/support/docview.wss?uid=swg22007183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129829
CVE ID: CVE-2017-1520 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-16T17:37:46.801Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Configuration Description: IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039308 - http://www.securityfocus.com/bid/100684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129830 - http://www.ibm.com/support/docview.wss?uid=swg22007186
CVE ID: CVE-2017-1521 State: PUBLISHED Published: 2017-10-26T21:00:00 Last Updated: 2024-08-05T13:32:30.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg220096
Container: References: - http://www.securityfocus.com/bid/101571 - http://www.ibm.com/support/docview.wss?uid=swg22009673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129831
CVE ID: CVE-2017-1522 State: PUBLISHED Published: 2017-10-05T17:00:00Z Last Updated: 2024-09-16T19:20:57.650Z Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129832. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129832
CVE ID: CVE-2017-1523 State: PUBLISHED Published: 2017-10-24T21:00:00 Last Updated: 2024-08-05T13:32:30.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129892 - https://www.ibm.com/support/docview.wss?uid=swg22009633
CVE ID: CVE-2017-1524 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-16T18:08:30.656Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103477 - http://www.ibm.com/support/docview.wss?uid=s
Program Container: References: - http://www.securityfocus.com/bid/103477 - http://www.ibm.com/support/docview.wss?uid=swg22014815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/129970
CVE ID: CVE-2017-1527 State: PUBLISHED Published: 2017-09-26T17:00:00Z Last Updated: 2024-09-17T02:11:13.118Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Obtain Information Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130156 - http://www.ibm.com/support/docview.wss?uid=swg22007346 - http://www.securityfocus.com/bi
ud.com/vulnerabilities/130156 - http://www.ibm.com/support/docview.wss?uid=swg22007346 - http://www.securityfocus.com/bid/100959
CVE ID: CVE-2017-1530 State: PUBLISHED Published: 2017-09-26T17:00:00Z Last Updated: 2024-09-17T01:41:51.631Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007351 - http://www.securityfocus.com/bid/100960 - https://exchange
s: - http://www.ibm.com/support/docview.wss?uid=swg22007351 - http://www.securityfocus.com/bid/100960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130409
CVE ID: CVE-2017-1531 State: PUBLISHED Published: 2017-09-26T17:00:00Z Last Updated: 2024-09-17T03:17:25.628Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130410. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130410 - http://www.
s: - http://www.securityfocus.com/bid/100963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130410 - http://www.ibm.com/support/docview.wss?uid=swg22007354
CVE ID: CVE-2017-1532 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T23:21:40.888Z Vendors: IBM Products: Rational DOORS Problem Types: Cross-Site Scripting Description: IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012789 - http://www.securityfocus.com/bid/102888 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130411