Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39040 State: PUBLISHED Published: 2022-04-25T15:20:15.587412Z Last Updated: 2024-09-16T17:28:38.451Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:H/UI:R/A:N/C:L/AV:N/AC:L/PR:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Planning Analytics Workspace Problem Types: Gain Access Description: IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 214025. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214025
CVE ID: CVE-2021-39041 State: PUBLISHED Published: 2022-07-12T17:35:21.756657Z Last Updated: 2024-09-17T04:14:12.345Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/C:N/AV:N/S:U/UI:N/A:L/PR:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Denial of Service Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specified ports. IBM X-Force ID: 214028. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214028
CVE ID: CVE-2021-39043 State: PUBLISHED Published: 2022-05-20T16:20:17.548608Z Last Updated: 2024-09-16T22:03:16.549Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/I:L/A:N/C:L/AC:L/AV:N/S:C/UI:N/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz Team Server Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214032. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
ted session. IBM X-Force ID: 214032. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6587797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214032
CVE ID: CVE-2021-39044 State: PUBLISHED Published: 2022-02-02T12:04:13.200970Z Last Updated: 2024-09-17T00:51:38.718Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AV:N/C:N/UI:R/PR:N/A:N/AC:L/I:L/RC:C/E:U/RL:O) Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214210
CVE ID: CVE-2021-39045 State: PUBLISHED Published: 2022-09-01T19:00:28.121687Z Last Updated: 2024-09-16T16:47:36.549Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/AV:L/AC:L/I:N/S:U/A:N/UI:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214345 - https://security.netapp.com/advisory/ntap-20221014-
5285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214345 - https://security.netapp.com/advisory/ntap-20221014-0005/
CVE ID: CVE-2021-39046 State: PUBLISHED Published: 2022-03-18T15:40:16.124913Z Last Updated: 2024-09-16T22:02:31.526Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/I:N/PR:H/AC:L/S:U/AV:N/A:N/UI:N/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Business Automation Workflow, Business Process Manager Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6564387 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6564387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214346
CVE ID: CVE-2021-39047 State: PUBLISHED Published: 2022-06-24T15:35:26.010998Z Last Updated: 2024-09-16T16:22:59.856Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/I:L/UI:R/AC:L/A:N/S:C/C:L/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214349. Additional Analyst Notes: - CVE Program Container: References: - http
within a trusted session. IBM X-Force ID: 214349. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6565099 - https://www.ibm.com/support/pages/node/6597241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214349 - https://security.netapp.com/advisory/ntap-20220729-0002/
CVE ID: CVE-2021-39048 State: PUBLISHED Published: 2021-12-13T18:35:31.930271Z Last Updated: 2024-09-17T03:38:42.604Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/AV:L/C:N/I:N/S:U/PR:N/A:H/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Problem Types: Denial of Service Description: IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 214438. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6524706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214438 - http
s: - https://www.ibm.com/support/pages/node/6524706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214438 - https://security.gentoo.org/glsa/202209-02
CVE ID: CVE-2021-39049 State: PUBLISHED Published: 2021-12-13T18:35:33.379845Z Last Updated: 2024-09-17T00:02:01.093Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/A:L/PR:N/S:U/C:L/I:L/AV:L/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analyst's Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 214439. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214439
CVE ID: CVE-2021-39050 State: PUBLISHED Published: 2021-12-13T18:35:34.812506Z Last Updated: 2024-09-17T02:10:55.654Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/A:L/S:U/PR:N/C:L/I:L/AV:L/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analyst's Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 214440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214440
CVE ID: CVE-2021-39051 State: PUBLISHED Published: 2022-03-14T16:45:18.019713Z Last Updated: 2024-09-16T20:47:46.655Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/S:U/AC:H/UI:N/I:L/PR:N/A:N/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Gain Access Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Forc
n server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214441
CVE ID: CVE-2021-39052 State: PUBLISHED Published: 2021-12-13T17:55:30.952865Z Last Updated: 2024-09-17T00:01:01.517Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/C:L/AV:N/I:L/UI:N/S:U/PR:N/AC:H/A:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Bypass Security Description: IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214523
CVE ID: CVE-2021-39053 State: PUBLISHED Published: 2021-12-13T17:55:32.405225Z Last Updated: 2024-09-17T00:06:24.685Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/AC:H/A:N/S:U/PR:N/C:H/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Obtain Information Description: IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524. Additional Analyst Notes: - CVE Progra
ploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214524
CVE ID: CVE-2021-39054 State: PUBLISHED Published: 2021-12-13T17:55:33.842005Z Last Updated: 2024-09-17T04:09:01.037Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AV:N/UI:R/I:L/S:C/PR:L/A:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Gain Access Description: IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 214525. Additional Analyst Notes: - CVE Program Container: R
launch further attacks against the victim. IBM X-Force ID: 214525. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214525
CVE ID: CVE-2021-39055 State: PUBLISHED Published: 2022-03-14T16:45:19.662513Z Last Updated: 2024-09-16T18:29:23.530Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/UI:R/S:C/AV:N/I:L/A:N/PR:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Cross-Site Scripting Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214534. Additional Analyst Notes: - CVE Program Container: References: - https://www.
a trusted session. IBM X-Force ID: 214534. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214534
CVE ID: CVE-2021-39056 State: PUBLISHED Published: 2022-01-13T18:05:11.925479Z Last Updated: 2024-09-17T04:09:12.367Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/AV:N/AC:L/S:U/A:H/PR:L/I:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: i Problem Types: Denial of Service Description: The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6540294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214537
CVE ID: CVE-2021-39057 State: PUBLISHED Published: 2021-12-13T18:35:36.353381Z Last Updated: 2024-09-16T17:18:11.998Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/UI:N/C:L/I:L/A:N/S:U/PR:L/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525346 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214616
CVE ID: CVE-2021-39058 State: PUBLISHED Published: 2021-12-13T17:55:35.640182Z Last Updated: 2024-09-16T20:03:13.108Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/C:H/S:U/PR:N/AC:H/A:N/UI:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Obtain Information Description: IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214617
CVE ID: CVE-2021-39059 State: PUBLISHED Published: 2022-05-11T16:10:14.841926Z Last Updated: 2024-09-16T23:46:20.687Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AV:N/I:L/PR:L/S:C/AC:L/A:N/UI:R/RC:C/E:H/RL:O) Vendors: IBM Products: Jazz Team Server Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214619. Additional Analyst Notes: - CVE Program Container: References: - htt
e within a trusted session. IBM X-Force ID: 214619. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6584347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214619
CVE ID: CVE-2021-39063 State: PUBLISHED Published: 2021-12-13T18:35:37.784821Z Last Updated: 2024-09-17T00:21:55.628Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/UI:N/C:L/I:L/A:N/S:U/PR:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information due to a misconfiguration in access control headers. IBM X-Force ID: 214956. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525346 - https://exchange.xforce.ibmc
es: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214956
CVE ID: CVE-2021-39064 State: PUBLISHED Published: 2021-12-13T17:55:37.000071Z Last Updated: 2024-09-17T03:34:14.623Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/PR:N/A:N/AC:H/I:N/UI:N/AV:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Obtain Information Description: IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214957
CVE ID: CVE-2021-39065 State: PUBLISHED Published: 2021-12-13T17:55:38.641969Z Last Updated: 2024-09-16T22:30:33.152Z Severity: HIGH (CVSS 8.1 CVSS:3.0/C:H/AV:N/I:H/UI:N/S:U/PR:N/A:H/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Gain Privileges Description: IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958. A
attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/214958
CVE ID: CVE-2021-39066 State: PUBLISHED Published: 2022-02-02T12:04:14.245603Z Last Updated: 2024-09-17T01:51:26.668Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/A:L/AC:L/UI:N/PR:L/C:L/AV:N/S:U/RL:O/E:U/RC:C) Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215040
CVE ID: CVE-2021-39068 State: PUBLISHED Published: 2022-04-11T18:17:12.131519Z Last Updated: 2024-09-17T01:26:59.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/UI:R/A:N/PR:L/I:L/AV:N/AC:L/RL:O/RC:C/E:H) Vendors: IBM Products: Curam Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 215306. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
usted session. IBM X-Force ID: 215306. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215306
CVE ID: CVE-2021-39070 State: PUBLISHED Published: 2022-02-02T12:04:14.947335Z Last Updated: 2024-09-16T18:54:32.863Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/UI:N/PR:N/AC:L/A:H/I:H/AV:N/C:H/S:U/RL:O/RC:C/E:U) Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6552318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215353
CVE ID: CVE-2021-39072 State: PUBLISHED Published: 2022-04-19T16:15:20.454167Z Last Updated: 2024-09-16T23:37:00.925Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/AC:H/AV:N/A:N/I:N/UI:N/PR:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 215581. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/657
ID: 215581. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215581
CVE ID: CVE-2021-39074 State: PUBLISHED Published: 2022-06-29T15:55:11.265402Z Last Updated: 2024-09-16T23:40:32.249Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/A:N/AV:N/C:L/UI:R/I:L/PR:N/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6598759 - https://exchange.xforce.ibmclou
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6598759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215583
CVE ID: CVE-2021-39076 State: PUBLISHED Published: 2022-04-19T16:15:21.903113Z Last Updated: 2024-09-17T02:47:49.740Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/C:L/AC:H/A:N/I:N/S:U/PR:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6572979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215585
CVE ID: CVE-2021-39077 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-07-23T20:45:00.000Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Problem Types: CWE-319 Description: IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6831647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215587
CVE ID: CVE-2021-39078 State: PUBLISHED Published: 2022-04-19T16:15:23.430363Z Last Updated: 2024-09-16T16:33:32.644Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/A:N/AV:L/C:H/AC:H/S:U/PR:H/UI:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6572983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/215589