Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1149 State: PUBLISHED Published: 2017-04-25T18:00:00 Last Updated: 2024-08-05T13:25:17.306Z Vendors: IBM Products: UrbanCode Deploy Problem Types: Gain Access Description: IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg2C1000289 - http://www.securityfocus.com/bid/98026
CVE ID: CVE-2017-1150 State: PUBLISHED Published: 2017-03-08T19:00:00 Last Updated: 2024-08-05T13:25:17.274Z Vendors: IBM Corporation Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037946 - http://www.securityfocus.com/bid/96597 - http://www.ibm.com/support/docview.wss?uid=swg21999515
CVE ID: CVE-2017-1151 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T13:25:17.345Z Vendors: IBM Corporation Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037984 - http://www.ibm.com/support/docview.wss?uid=swg21999293 - http://www.securityfocus.com/bid/96841
CVE ID: CVE-2017-1152 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-05T13:25:17.210Z Vendors: IBM Corporation Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001551 - http://www.securityfocus.com/bid/99237
CVE ID: CVE-2017-1153 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-05T13:25:17.402Z Vendors: IBM Corporation Products: TRIRIGA Application Platform Problem Types: Gain Privileges Description: IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97066 - http://www.ibm.com/support/docview.wss?uid=swg21999563
CVE ID: CVE-2017-1154 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-05T13:25:17.299Z Vendors: IBM Corporation Products: Algo One Problem Types: Obtain Information Description: IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference #: 1999892. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999892 - http://www.securityfocus.com/bid/97248
CVE ID: CVE-2017-1155 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T13:25:17.262Z Vendors: IBM Corporation Products: Algo One Problem Types: Obtain Information Description: IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999754 - http://www.securityfocus.com/bid/96968
CVE ID: CVE-2017-1156 State: PUBLISHED Published: 2017-05-05T19:00:00 Last Updated: 2024-08-05T13:25:17.256Z Vendors: IBM Corporation Products: WebSphere Portal Problem Types: Gain Access Description: IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592 Additional Analyst N
highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592 Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000153 - http://www.securitytracker.com/id/1038390 - http://www.securityfocus.com/bid/98340
CVE ID: CVE-2017-1157 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-16T19:39:56.955Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/122778 - http://www.securityfocus.com/bid/99353 - http://www.ibm.com/support/docview.wss?uid=swg22001007
CVE ID: CVE-2017-1159 State: PUBLISHED Published: 2017-05-22T20:00:00 Last Updated: 2024-08-05T13:25:17.473Z Vendors: IBM Corporation Products: Business Process Manager Advanced Problem Types: Gain Access Description: IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 122
w the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 122891. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000253 - http://www.securityfocus.com/bid/98561
CVE ID: CVE-2017-1160 State: PUBLISHED Published: 2017-04-17T21:00:00 Last Updated: 2024-08-05T13:25:17.312Z Vendors: IBM Corporation Products: Financial Transaction Manager Problem Types: Cross-Site Scripting Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97666 - http://www.ibm.com/support/docview.w
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/97666 - http://www.ibm.com/support/docview.wss?uid=swg22001574
CVE ID: CVE-2017-1161 State: PUBLISHED Published: 2017-04-17T21:00:00 Last Updated: 2024-08-05T13:25:17.348Z Vendors: IBM Corporation Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000316 - http://www.securityfocus.com/bid/97
am Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22000316 - http://www.securityfocus.com/bid/97665
CVE ID: CVE-2017-1162 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-16T23:26:24.746Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 122957. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/122957 - http://www.ibm.com/support/docview.wss?uid=swg22008194
CVE ID: CVE-2017-1164 State: PUBLISHED Published: 2017-10-25T12:00:00 Last Updated: 2024-08-05T13:25:17.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123036 - http://www.securityfocus.com/bid/101586
CVE ID: CVE-2017-1168 State: PUBLISHED Published: 2017-08-10T15:00:00Z Last Updated: 2024-09-17T04:19:28.183Z Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006976 - https://exchange.xforce.ibmcloud.com/vu
ontainer: References: - http://www.ibm.com/support/docview.wss?uid=swg22006976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123187 - http://www.securityfocus.com/bid/100269
CVE ID: CVE-2017-1169 State: PUBLISHED Published: 2017-10-25T12:00:00Z Last Updated: 2024-09-17T01:31:42.245Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123188 - http://www.ibm.com/support/docview.wss?uid=swg22009296
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123188 - http://www.ibm.com/support/docview.wss?uid=swg22009296 - http://www.securityfocus.com/bid/101593
CVE ID: CVE-2017-1170 State: PUBLISHED Published: 2017-04-26T17:00:00 Last Updated: 2024-08-05T13:25:17.400Z Vendors: IBM Corporation Products: WebSphere Commerce Enterprise Problem Types: Gain Access Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001225 - http://www.securityfocus.com/bid/98027 - http://www.securitytracker.com/id/1038359
CVE ID: CVE-2017-1171 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-05T13:25:17.380Z Vendors: IBM Corporation Products: TRIRIGA Application Platform Problem Types: Gain Privileges Description: The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference #: 2001083. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97245 - https://www.ibm.com/support/docview.wss?uid=swg22001083
CVE ID: CVE-2017-1174 State: PUBLISHED Published: 2017-08-10T15:00:00Z Last Updated: 2024-09-16T20:42:40.586Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004268 - http://www.securityfocus.com/bid/100246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123296
CVE ID: CVE-2017-1175 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-16T23:26:09.122Z Vendors: IBM Products: Maximo Asset Management Problem Types: Data Manipulation Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123297 - http://www.securityfocus.com/bid/99363
CVE ID: CVE-2017-1176 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-16T19:14:14.342Z Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123299 - http://www.securityfocus.com/bid/99371 - http://www.ibm.com/support/docview.wss?uid=swg22005210
CVE ID: CVE-2017-1177 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T20:17:50.877Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Compliance Problem Types: Obtain Information Description: IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123429
CVE ID: CVE-2017-1178 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T13:25:17.420Z Vendors: IBM Products: Endpoint Manager for Security and Compliance Problem Types: Cross-Site Scripting Description: IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004164 - http://www.securityfocus.com/bid/98909
ontainer: References: - http://www.ibm.com/support/docview.wss?uid=swg22004164 - http://www.securityfocus.com/bid/98909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123430
CVE ID: CVE-2017-1179 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-05T13:25:17.406Z Vendors: IBM Products: BigFix Compliance Analytics Problem Types: Obtain Information Description: IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98910 - http://www.ibm.com/support/docview.wss?uid=swg22004161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123431
CVE ID: CVE-2017-1180 State: PUBLISHED Published: 2017-04-05T18:00:00 Last Updated: 2024-08-05T13:25:17.389Z Vendors: IBM Corporation Products: TRIRIGA Application Platform Problem Types: Gain Privileges Description: The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97273 - http://www.ibm.com/support/docview.wss?uid=swg22001084
CVE ID: CVE-2017-1181 State: PUBLISHED Published: 2017-07-14T13:00:00Z Last Updated: 2024-09-17T04:29:08.459Z Vendors: IBM Products: Tivoli Monitoring V6 Problem Types: Obtain Information Description: IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123487 - http://www.ibm.com/support/docview.wss?uid=swg22003402 - http://www.securityfocus.com/bid/99596 - http://www.securitytracker.com/id/1038913
CVE ID: CVE-2017-1182 State: PUBLISHED Published: 2017-07-14T13:00:00Z Last Updated: 2024-09-16T19:04:42.739Z Vendors: IBM Products: Tivoli Monitoring V6 Problem Types: Gain Privileges Description: IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123493 - http://www.ibm.com/support/docview.wss?uid=swg22003402 - http://www.securitytracker.com/id/1038913
CVE ID: CVE-2017-1183 State: PUBLISHED Published: 2017-07-14T13:00:00Z Last Updated: 2024-09-16T20:52:33.757Z Vendors: IBM Products: Tivoli Monitoring V6 Problem Types: Data Manipulation Description: IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123494 - http://www.ibm.com/support/docview.wss?uid=swg22003402 - http://www.securityfocus.com/bid/99610 - http://www.securitytracker.com/id/1038913
CVE ID: CVE-2017-1189 State: PUBLISHED Published: 2017-09-07T16:00:00 Last Updated: 2024-08-05T13:25:17.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039268 - http://www.securityfocus.com/bid/100699 - http://www.ibm.com/support/docview.wss?uid=swg22008028 - http
com/id/1039268 - http://www.securityfocus.com/bid/100699 - http://www.ibm.com/support/docview.wss?uid=swg22008028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123558
CVE ID: CVE-2017-1190 State: PUBLISHED Published: 2017-08-14T22:00:00Z Last Updated: 2024-09-16T19:41:49.584Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Gain Privileges Description: IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID: 123559. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123559 - http://www.ibm.com/support/docview.wss?uid=swg22006799
CVE ID: CVE-2017-1191 State: PUBLISHED Published: 2017-12-27T16:00:00Z Last Updated: 2024-09-16T19:36:39.319Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123661
CVE ID: CVE-2017-1192 State: PUBLISHED Published: 2017-08-10T15:00:00Z Last Updated: 2024-09-17T00:51:14.783Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004267 - http://www.securityfocus.com/bid/102864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/123663
CVE ID: CVE-2017-1193 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:25:17.426Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/123667 - http://www.securityfocus.com/bid/99229 - http://www.ibm.com/support/docview.wss?uid=swg22004202
CVE ID: CVE-2017-1194 State: PUBLISHED Published: 2017-04-28T17:00:00 Last Updated: 2024-08-05T13:25:17.482Z Vendors: IBM Corporation Products: IBM WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98142 - http://www.ibm.com/support/docview.wss?uid=swg22001226 - http://www.securitytracker.com/id/1038378
CVE ID: CVE-2017-1195 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T16:52:56.227Z Vendors: IBM Products: Cram Social Program Management Problem Types: Gain Access Description: IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: