Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7435 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972799
CVE ID: CVE-2015-7436 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership. Additional Analyst Notes: - CVE Program Container: References:
y leveraging administrative changes to group membership. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972799
CVE ID: CVE-2015-7437 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970927 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC99482
CVE ID: CVE-2015-7438 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT09929 - http://www-01.ibm.com/support/docview.wss?uid=swg21971012
CVE ID: CVE-2015-7439 State: PUBLISHED Published: 2016-01-27T02:00:00 Last Updated: 2024-08-06T07:51:27.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 through 9.5, and Rational Software Architect RealTime (RSART) 8.5 through 9.5, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972909
CVE ID: CVE-2015-7440 State: PUBLISHED Published: 2018-03-15T22:00:00 Last Updated: 2024-08-06T07:51:27.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.
before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15,
.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 might allow local users to gain privileges via unspecified vectors. IBM X-Force ID: 108098. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108098
CVE ID: CVE-2015-7441 State: PUBLISHED Published: 2016-01-01T00:00:00 Last Updated: 2024-08-06T07:51:27.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034531 - https://www-01.ibm.com/support/docview.wss?u
rogram Container: References: - http://www.securitytracker.com/id/1034531 - https://www-01.ibm.com/support/docview.wss?uid=swg21971968 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54760 - http://www.securitytracker.com/id/1034532
CVE ID: CVE-2015-7442 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T07:51:27.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971295 - http://www.securityfocus.com/bid/77558
CVE ID: CVE-2015-7444 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T07:51:27.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly replicate the search index, which allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24041614 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54563
CVE ID: CVE-2015-7445 State: PUBLISHED Published: 2016-01-01T02:00:00 Last Updated: 2024-08-06T07:51:27.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972480 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573 - http://www.securityfocus.com/bid/79681
CVE ID: CVE-2015-7446 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-06T07:51:27.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005570
CVE ID: CVE-2015-7447 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:51:27.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers to bypass intended Portal AccessControl REST API access restrictions and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79511 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI51395 - http://www.securitytracker.com/id/1034538 - http://www-01.ibm
ttp://www-01.ibm.com/support/docview.wss?uid=swg1PI51395 - http://www.securitytracker.com/id/1034538 - http://www-01.ibm.com/support/docview.wss?uid=swg21973152
CVE ID: CVE-2015-7448 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-06T07:51:27.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container
cated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974938
CVE ID: CVE-2015-7449 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T07:51:27.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Team Concert (RTC) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Requirements Composer (RRC) 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x
efore iFix2; Rational Requirements Composer (RRC) 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7 before iFix1, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2 allow local users to obtain sen
.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2 allow local users to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 108221. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108221
CVE ID: CVE-2015-7450 State: PUBLISHED Published: 2016-01-02T21:00:00.000Z Last Updated: 2025-10-21T23:55:56.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21971733 - http://www-01.ibm.com/support/docview.wss?uid=swg21971342 - http://
www-01.ibm.com/support/docview.wss?uid=swg21971733 - http://www-01.ibm.com/support/docview.wss?uid=swg21971342 - http://www-01.ibm.com/support/docview.wss?uid=swg21971758 - http://www.securityfocus.com/bid/77653 - http://www.securitytracker.com/id/1035125 - http://www-01.ibm.com/support/docview.wss?uid=swg21972799 - http://www-01.ibm.com/support/docview.wss?uid=swg21971376 - https://www.exploit-db.com/exploits/41613/ - http://www-01.ibm.com/support/docview.wss?uid=swg21970575
CVE ID: CVE-2015-7451 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T07:51:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972423
CVE ID: CVE-2015-7452 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T07:51:27.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972463
CVE ID: CVE-2015-7453 State: PUBLISHED Published: 2018-03-15T22:00:00 Last Updated: 2024-08-06T07:51:27.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix
.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x befo
.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108296. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108296
CVE ID: CVE-2015-7454 State: PUBLISHED Published: 2016-03-21T14:00:00 Last Updated: 2024-08-06T07:51:27.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035319 - http://www.securityfocus.com/bid/85089 - http://www-01
tainer: References: - http://www.securitytracker.com/id/1035319 - http://www.securityfocus.com/bid/85089 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678 - http://www-01.ibm.com/support/docview.wss?uid=swg21972005
CVE ID: CVE-2015-7455 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-06T07:51:27.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234
CVE ID: CVE-2015-7456 State: PUBLISHED Published: 2016-01-01T11:00:00 Last Updated: 2024-08-06T07:51:27.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV79381 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005476
CVE ID: CVE-2015-7457 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-06T07:51:27.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56432
CVE ID: CVE-2015-7458 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T07:51:27.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108354. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108354
CVE ID: CVE-2015-7459 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T07:51:27.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108355. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108355
CVE ID: CVE-2015-7460 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T07:51:27.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108356. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21980518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108356
CVE ID: CVE-2015-7461 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T07:51:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/108357 - http://www-01.ibm.com/support/docview.wss?uid=swg21980518
CVE ID: CVE-2015-7462 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T07:51:27.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036053 - http://www-01.ibm.com/support/docview.wss?uid=swg21984557
CVE ID: CVE-2015-7463 State: PUBLISHED Published: 2018-03-15T22:00:00 Last Updated: 2024-08-06T07:51:27.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete process and task data by leveraging incorrect authorization checks. IBM X-Force ID: 108393. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/108393 - http://www-01.ibm.com/support/docview.wss?uid=swg21973442
CVE ID: CVE-2015-7464 State: PUBLISHED Published: 2016-01-29T11:00:00 Last Updated: 2024-08-06T07:51:27.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service (Report Builder server outage) via a crafted request to a Report Builder instance URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972485 - http://www.securityfocus.com/bid/96750
CVE ID: CVE-2015-7465 State: PUBLISHED Published: 2016-01-10T02:00:00 Last Updated: 2024-08-06T07:51:27.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972484
CVE ID: CVE-2015-7466 State: PUBLISHED Published: 2016-01-10T02:00:00 Last Updated: 2024-08-06T07:51:28.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972484
CVE ID: CVE-2015-7467 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T07:51:27.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972485