Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38959 State: PUBLISHED Published: 2021-11-17T14:00:17.939440Z Last Updated: 2024-09-17T02:41:32.881Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/S:U/PR:N/AV:L/I:N/A:H/C:N/UI:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: SPSS Statistics Problem Types: Denial of Service Description: IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system. IBM X-Force ID: 212046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212046
CVE ID: CVE-2021-38960 State: PUBLISHED Published: 2022-02-04T22:33:07.197461Z Last Updated: 2024-09-16T16:27:49.654Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/PR:N/I:N/AC:L/S:U/A:N/UI:N/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: OPENBMC, HMC Problem Types: Obtain Information Description: IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6529322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
CVE ID: CVE-2021-38961 State: PUBLISHED Published: 2021-12-27T17:10:10.446302Z Last Updated: 2024-09-16T21:57:14.919Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/A:N/AV:N/I:L/C:L/UI:R/PR:N/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: OPENBMC Problem Types: Cross-Site Scripting Description: IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6536720 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6536720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212049
CVE ID: CVE-2021-38963 State: PUBLISHED Published: 2024-09-24T10:15:56.981Z Last Updated: 2024-09-24T13:49:57.213Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: Aspera Console Problem Types: CWE-1236 Description: IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169765
CVE ID: CVE-2021-38965 State: PUBLISHED Published: 2022-01-17T17:15:12.165758Z Last Updated: 2024-09-17T01:00:41.936Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/PR:L/AC:L/I:L/AV:N/S:U/C:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: FileNet Content Manager Problem Types: Gain Privileges Description: IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212346
CVE ID: CVE-2021-38966 State: PUBLISHED Published: 2021-12-21T19:10:17.506673Z Last Updated: 2024-09-17T01:12:18.333Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/AV:N/A:N/S:C/PR:L/C:L/I:L/E:H/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Automation Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212357. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6
ce ID: 212357. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6526488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212357
CVE ID: CVE-2021-38967 State: PUBLISHED Published: 2021-11-30T16:45:16.628657Z Last Updated: 2024-09-17T00:21:05.932Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:C/UI:N/A:H/C:H/AV:L/I:H/AC:L/PR:H/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Gain Privileges Description: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6512826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212441
CVE ID: CVE-2021-38969 State: PUBLISHED Published: 2022-05-11T16:10:13.363468Z Last Updated: 2024-09-17T04:29:37.428Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/UI:N/S:U/A:L/AC:H/I:L/PR:N/AV:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Virtualize Problem Types: Denial of Service Description: IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials. IBM X-Force ID: 212609. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6584337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212609
CVE ID: CVE-2021-38971 State: PUBLISHED Published: 2022-03-14T17:00:21.310191Z Last Updated: 2024-09-17T01:06:09.137Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/S:U/I:N/UI:N/AC:L/PR:H/C:H/AV:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Data Virtualization on Cloud Pak for Data Problem Types: Obtain Information Description: IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6551076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212620
CVE ID: CVE-2021-38972 State: PUBLISHED Published: 2021-11-12T15:20:22.326033Z Last Updated: 2024-09-17T01:05:58.427Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AV:N/UI:N/C:N/S:U/AC:L/I:L/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212775
CVE ID: CVE-2021-38973 State: PUBLISHED Published: 2021-11-12T15:20:23.937028Z Last Updated: 2024-09-17T02:53:00.953Z Severity: LOW (CVSS 2.4 CVSS:3.0/UI:R/AV:N/A:N/C:N/S:U/I:L/AC:L/PR:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212778
CVE ID: CVE-2021-38974 State: PUBLISHED Published: 2021-11-15T15:35:30.342013Z Last Updated: 2024-09-16T20:17:40.626Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:N/C:N/AV:N/I:L/S:U/A:L/PR:L/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Denial of Service Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests. IBM X-Force ID: 212779. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212779
CVE ID: CVE-2021-38975 State: PUBLISHED Published: 2021-11-15T15:35:32.016416Z Last Updated: 2024-09-17T01:51:40.009Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/S:U/A:N/PR:L/AC:L/UI:N/C:L/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 212780. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212780
CVE ID: CVE-2021-38976 State: PUBLISHED Published: 2021-11-15T15:35:33.620425Z Last Updated: 2024-09-16T19:15:09.265Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/AV:L/C:H/S:U/I:N/A:N/PR:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user. X-Force ID: 212781. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212781
CVE ID: CVE-2021-38977 State: PUBLISHED Published: 2021-11-15T15:35:35.224885Z Last Updated: 2024-09-16T18:03:19.777Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/C:L/UI:R/AC:H/PR:N/S:U/I:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X
ookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 212782. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212782
CVE ID: CVE-2021-38978 State: PUBLISHED Published: 2021-11-15T15:35:36.823539Z Last Updated: 2024-09-17T02:36:34.690Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/C:H/AV:N/A:N/S:U/I:N/PR:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 212783. Additional Analyst Notes: - CVE Program Container: References:
ng man in the middle techniques. IBM X-Force ID: 212783. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212783
CVE ID: CVE-2021-38979 State: PUBLISHED Published: 2021-11-15T15:35:38.410108Z Last Updated: 2024-09-16T20:52:53.536Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/UI:N/AV:N/C:H/PR:H/I:N/S:U/A:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 212785. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516034 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212785
CVE ID: CVE-2021-38980 State: PUBLISHED Published: 2021-11-23T19:15:36.395724Z Last Updated: 2024-09-16T19:19:35.965Z Severity: LOW (CVSS 2.7 CVSS:3.0/I:N/S:U/PR:H/AC:L/UI:N/AV:N/C:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786. Additional Analyst Notes: - CVE Program Container: References: - http
ttacks against the system. IBM X-Force ID: 212786. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6518326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212786
CVE ID: CVE-2021-38981 State: PUBLISHED Published: 2021-11-15T15:35:40.041530Z Last Updated: 2024-09-17T04:19:45.003Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/S:U/A:N/PR:N/AC:L/UI:N/C:L/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212788. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516048
212788. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212788
CVE ID: CVE-2021-38982 State: PUBLISHED Published: 2021-11-15T15:35:41.616023Z Last Updated: 2024-09-16T20:52:05.965Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/C:L/AV:N/PR:L/S:C/I:L/A:N/AC:L/RL:O/RC:C/E:H) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212791. Additional Analyst Notes: - CVE Program Container: References: - https://www.
a trusted session. IBM X-Force ID: 212791. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212791
CVE ID: CVE-2021-38983 State: PUBLISHED Published: 2021-11-15T15:35:43.197282Z Last Updated: 2024-09-16T16:39:03.221Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:H/AV:N/UI:N/AC:H/PR:H/I:N/S:U/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212792
CVE ID: CVE-2021-38984 State: PUBLISHED Published: 2021-11-15T15:35:44.782208Z Last Updated: 2024-09-16T21:57:53.838Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/C:L/AV:N/PR:N/I:N/S:U/A:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212793
CVE ID: CVE-2021-38985 State: PUBLISHED Published: 2021-11-12T15:20:25.503005Z Last Updated: 2024-09-17T01:11:28.775Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/S:U/A:N/UI:N/AV:N/PR:L/I:L/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212799
CVE ID: CVE-2021-38986 State: PUBLISHED Published: 2022-03-01T16:45:25.622031Z Last Updated: 2024-09-17T01:36:34.566Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AC:H/S:U/I:L/PR:N/C:L/AV:N/UI:N/A:L/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Gain Privileges Description: IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6560032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212942
CVE ID: CVE-2021-38988 State: PUBLISHED Published: 2022-03-07T16:55:14.019646Z Last Updated: 2024-09-17T02:02:34.798Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/PR:N/AC:L/A:H/S:U/AV:L/C:N/I:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212950. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6561281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212950
CVE ID: CVE-2021-38989 State: PUBLISHED Published: 2022-03-07T16:55:15.684129Z Last Updated: 2024-09-17T02:41:58.321Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:N/I:N/UI:N/AC:L/PR:N/A:H/AV:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6561277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212951
CVE ID: CVE-2021-38990 State: PUBLISHED Published: 2022-01-07T17:55:27.439355Z Last Updated: 2024-09-16T18:38:43.675Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/UI:N/PR:N/S:U/A:H/AC:L/C:H/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: AIX, VIOS Problem Types: Gain Privileges Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515496 - https://www.ibm.com/support/pages/node/6538700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212952
CVE ID: CVE-2021-38991 State: PUBLISHED Published: 2022-01-11T16:25:18.300280Z Last Updated: 2024-09-16T18:48:29.444Z Severity: HIGH (CVSS 8.4 CVSS:3.0/PR:N/A:H/S:U/AV:L/C:H/I:H/UI:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: AIX, VIOS Problem Types: Gain Privileges Description: IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212953
CVE ID: CVE-2021-38993 State: PUBLISHED Published: 2022-02-25T18:00:11.336647Z Last Updated: 2024-09-17T02:06:22.867Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/S:U/C:N/PR:N/A:H/AC:L/I:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service. IBM X-Force ID: 212962. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6559320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/212962
CVE ID: CVE-2021-38994 State: PUBLISHED Published: 2022-02-24T17:05:12.368274Z Last Updated: 2024-09-16T17:03:54.297Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/UI:N/C:N/A:H/I:N/S:U/PR:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213072
CVE ID: CVE-2021-38995 State: PUBLISHED Published: 2022-02-24T17:05:19.828000Z Last Updated: 2024-09-17T01:31:22.557Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/UI:N/C:N/A:H/AV:L/AC:L/S:U/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213073
CVE ID: CVE-2021-38996 State: PUBLISHED Published: 2022-03-02T16:35:15.526010Z Last Updated: 2024-09-17T00:56:49.906Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/UI:N/A:H/C:N/AC:L/PR:N/AV:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6560390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213076
CVE ID: CVE-2021-38997 State: PUBLISHED Published: 2022-12-01T17:00:59.602Z Last Updated: 2025-04-23T15:11:05.790Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: API Connect Problem Types: CWE-644 Description: IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213212. Additional Analyst Notes: - CVE Program Container:
ipting, cache poisoning or session hijacking. IBM X-Force ID: 213212. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6842621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213212