Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43813 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:08.537632Z Description: No description available.
CVE ID: CVE-2022-43814 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:11.241142Z Description: No description available.
CVE ID: CVE-2022-43815 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:13.872332Z Description: No description available.
CVE ID: CVE-2022-43816 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:16.510267Z Description: No description available.
CVE ID: CVE-2022-43817 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:19.143714Z Description: No description available.
CVE ID: CVE-2022-43818 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:21.768559Z Description: No description available.
CVE ID: CVE-2022-43819 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:24.401479Z Description: No description available.
CVE ID: CVE-2022-43820 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:27.035532Z Description: No description available.
CVE ID: CVE-2022-43821 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:29.673635Z Description: No description available.
CVE ID: CVE-2022-43822 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:32.335765Z Description: No description available.
CVE ID: CVE-2022-43823 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:35.002628Z Description: No description available.
CVE ID: CVE-2022-43824 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:37.641425Z Description: No description available.
CVE ID: CVE-2022-43825 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:40.269328Z Description: No description available.
CVE ID: CVE-2022-43826 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:42.922250Z Description: No description available.
CVE ID: CVE-2022-43827 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:45.551378Z Description: No description available.
CVE ID: CVE-2022-43828 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:48.191209Z Description: No description available.
CVE ID: CVE-2022-43829 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:50.824184Z Description: No description available.
CVE ID: CVE-2022-43830 State: REJECTED Published: N/A Last Updated: 2023-11-15T06:44:53.448795Z Description: No description available.
CVE ID: CVE-2022-43831 State: PUBLISHED Published: 2023-07-31T00:35:12.192Z Last Updated: 2024-10-18T20:24:23.113Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Storage Scale Container Native Storage Access Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X-Force ID: 238941. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7015067 - https://exchange
gram Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7015067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/238941
CVE ID: CVE-2022-43840 State: PUBLISHED Published: 2025-04-14T20:43:28.652Z Last Updated: 2025-08-15T15:21:04.574Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-643 Description: IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43841 State: PUBLISHED Published: 2024-05-30T11:45:55.428Z Last Updated: 2024-08-03T13:40:06.469Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-525 Description: IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239078
CVE ID: CVE-2022-43842 State: PUBLISHED Published: 2024-02-23T18:47:13.874Z Last Updated: 2024-08-03T13:40:06.593Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: IBM Products: Aspera Console Problem Types: CWE-89 Description: IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 239079. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7122632 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/7122632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239079
CVE ID: CVE-2022-43843 State: PUBLISHED Published: 2023-12-14T00:41:07.920Z Last Updated: 2024-08-03T13:40:06.572Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Spectrum Scale Problem Types: CWE-327 Description: IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080. Additional Analyst Notes: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7094941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239080
CVE ID: CVE-2022-43844 State: PUBLISHED Published: 2023-01-05T17:19:27.774Z Last Updated: 2025-04-10T14:09:38.990Z Vendors: IBM Products: Robotic Process Automation for Cloud Pak Problem Types: CWE-613 Description: IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239081
CVE ID: CVE-2022-43845 State: PUBLISHED Published: 2024-09-24T10:11:00.911Z Last Updated: 2024-09-24T13:50:34.915Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-1004 Description: IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43847 State: PUBLISHED Published: 2025-04-14T20:22:01.813Z Last Updated: 2025-08-15T15:20:08.916Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-644 Description: IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43848 State: PUBLISHED Published: 2022-12-23T19:06:02.504Z Last Updated: 2025-04-15T13:45:36.670Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239169
CVE ID: CVE-2022-43849 State: PUBLISHED Published: 2022-12-23T19:16:19.688Z Last Updated: 2025-04-15T13:26:49.592Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239170
CVE ID: CVE-2022-43850 State: PUBLISHED Published: 2025-04-14T20:44:59.726Z Last Updated: 2025-08-15T15:20:38.725Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-79 Description: IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43851 State: PUBLISHED Published: 2025-04-14T20:39:56.933Z Last Updated: 2025-08-15T15:19:45.927Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-327 Description: IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43852 State: PUBLISHED Published: 2025-04-14T20:33:58.704Z Last Updated: 2025-08-15T15:19:13.088Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Console Problem Types: CWE-497 Description: IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7169766
CVE ID: CVE-2022-43855 State: PUBLISHED Published: 2024-03-08T17:52:57.326Z Last Updated: 2025-06-10T20:08:23.966Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: SPSS Statistics Problem Types: CWE-399 Description: IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7130881
CVE ID: CVE-2022-43857 State: PUBLISHED Published: 2022-12-22T20:20:18.563Z Last Updated: 2025-04-15T14:16:30.588Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Navigator for i Problem Types: CWE-22 Description: IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks and download log files by modifying servlet filter. IBM X-Force ID: 239301. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239301
CVE ID: CVE-2022-43858 State: PUBLISHED Published: 2022-12-22T20:34:13.863Z Last Updated: 2025-04-15T14:15:44.885Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Navigator for i Problem Types: CWE-22 Description: IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
rface. IBM X-Force ID: 239303. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239303
CVE ID: CVE-2022-43859 State: PUBLISHED Published: 2022-12-22T20:41:40.753Z Last Updated: 2025-04-15T14:30:33.780Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Navigator for i Problem Types: CWE-89 Description: IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. IBM X-Force ID: 239304. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/685
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239304
CVE ID: CVE-2022-43860 State: PUBLISHED Published: 2022-12-22T20:53:16.772Z Last Updated: 2025-04-15T14:29:40.840Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Navigator for i Problem Types: CWE-89 Description: IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are authorized to but not while using this interface. By performing an SQL injection an attacker could see user profile attributes through this interface. IBM X-Force ID: 239305. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850801 - https://exc
E Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6850801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239305
CVE ID: CVE-2022-43863 State: PUBLISHED Published: 2023-03-22T21:25:01.880Z Last Updated: 2025-02-25T20:52:46.012Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-20 Description: IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6964862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239425
CVE ID: CVE-2022-43864 State: PUBLISHED Published: 2023-01-25T18:07:21.454Z Last Updated: 2025-03-31T14:34:16.725Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Business Monitor Problem Types: CWE-22 Description: IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857239 - https://www.ibm.com/support/pages/n
ISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857239 - https://www.ibm.com/support/pages/node/6857223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239427
CVE ID: CVE-2022-43866 State: PUBLISHED Published: 2023-05-05T18:20:16.402Z Last Updated: 2025-01-29T16:08:06.495Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Maximo Asset Management Problem Types: CWE-79 Description: IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239436. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/n
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6983534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239436
CVE ID: CVE-2022-43867 State: PUBLISHED Published: 2022-12-06T18:12:25.807Z Last Updated: 2025-04-23T13:41:44.178Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Spectrum Scale Problem Types: CWE-78 Description: IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container. IBM X-Force ID: 239437. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6844771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239437
CVE ID: CVE-2022-43868 State: PUBLISHED Published: 2023-10-14T15:28:03.271Z Last Updated: 2024-09-16T20:03:34.983Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Access Problem Types: CWE-200 Description: IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239445
CVE ID: CVE-2022-43869 State: PUBLISHED Published: 2023-02-08T18:47:17.320Z Last Updated: 2025-03-25T13:51:41.867Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Elastic Storage System, Spectrum Scale Problem Types: CWE-134 Description: IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6909469 - https://www.ibm.com/support/pages/node/6909465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239539
CVE ID: CVE-2022-43870 State: PUBLISHED Published: 2023-02-22T17:26:20.175Z Last Updated: 2025-03-11T18:29:26.293Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Spectrum Virtualize Problem Types: CWE-532 Description: IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6858045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239540
CVE ID: CVE-2022-43871 State: PUBLISHED Published: 2023-04-29T02:42:10.334Z Last Updated: 2025-01-30T17:02:19.858Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Financial Transaction Manager for SWIFT Services Problem Types: CWE-79 Description: IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239707. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ssion. IBM X-Force ID: 239707. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239707
CVE ID: CVE-2022-43872 State: PUBLISHED Published: 2022-12-20T18:35:34.432Z Last Updated: 2025-04-16T14:54:17.353Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Financial Transaction Manager Problem Types: 285 Improper Authorization Description: IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6848881 - https://exchange.xforce.ibm
ner: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6848881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
CVE ID: CVE-2022-43873 State: PUBLISHED Published: 2023-02-22T17:32:31.652Z Last Updated: 2024-08-03T13:40:06.867Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Spectrum Virtualize Problem Types: 284 Description: An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6858047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239847
CVE ID: CVE-2022-43874 State: PUBLISHED Published: 2023-03-15T17:20:24.972Z Last Updated: 2025-02-26T21:25:52.338Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: CWE-79 Description: IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963. Additional Analyst Notes: - CVE Program Container: - CISA A
disclosure within a trusted session. IBM X-Force ID: 239963. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6960189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/239963
CVE ID: CVE-2022-43875 State: PUBLISHED Published: 2022-12-20T18:45:03.076Z Last Updated: 2025-04-16T14:53:39.607Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Financial Transaction Manager for SWIFT Services for Multiplatforms Problem Types: CWE-20 Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/68