Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38871 State: PUBLISHED Published: 2022-06-24T16:15:42.719522Z Last Updated: 2024-09-17T02:01:29.212Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/S:C/AC:L/A:N/PR:L/I:L/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz Team Server Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
sion. IBM X-Force ID: 208345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208345
CVE ID: CVE-2021-38872 State: PUBLISHED Published: 2022-05-17T16:25:21.862308Z Last Updated: 2024-09-16T18:17:59.500Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/I:N/C:N/AV:N/A:L/AC:L/UI:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: DataPower Gateway Problem Types: Denial of Service Description: IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208348
CVE ID: CVE-2021-38873 State: PUBLISHED Published: 2021-11-24T16:15:12.881322Z Last Updated: 2024-09-17T02:06:20.830Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:U/PR:H/A:H/I:H/AV:N/AC:L/C:H/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6517470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208396
CVE ID: CVE-2021-38874 State: PUBLISHED Published: 2022-04-27T15:20:31.307886Z Last Updated: 2024-09-16T19:01:40.581Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/S:U/PR:L/A:N/UI:N/AC:L/AV:N/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208397
CVE ID: CVE-2021-38875 State: PUBLISHED Published: 2021-11-23T19:15:31.816079Z Last Updated: 2024-09-16T23:25:23.907Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:N/AC:L/UI:N/PR:L/S:U/C:N/A:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6517672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208398
CVE ID: CVE-2021-38876 State: PUBLISHED Published: 2021-12-30T17:10:10.485368Z Last Updated: 2024-09-17T01:01:58.324Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/PR:N/C:L/I:L/UI:R/A:N/AC:L/AV:N/RC:C/RL:O/E:H) Vendors: IBM Products: i Problem Types: Cross-Site Scripting Description: IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6537250 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6537250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208404
CVE ID: CVE-2021-38877 State: PUBLISHED Published: 2021-09-23T18:05:51.826234Z Last Updated: 2024-09-16T23:21:58.808Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/S:C/AV:N/I:L/A:N/PR:L/AC:L/C:L/UI:N/RL:O/RC:C/E:H) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208405. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
sion. IBM X-Force ID: 208405. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208405
CVE ID: CVE-2021-38878 State: PUBLISHED Published: 2022-04-27T15:20:33.608959Z Last Updated: 2024-09-17T00:36:18.841Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/S:U/I:H/A:N/UI:N/C:N/AV:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Bypass Security Description: IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208756
CVE ID: CVE-2021-38879 State: PUBLISHED Published: 2022-06-24T16:15:44.246218Z Last Updated: 2024-09-16T17:03:52.831Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/I:N/S:U/AC:H/A:N/PR:N/UI:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Jazz Team Server Problem Types: Obtain Information Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 209057. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597501 - htt
7. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209057
CVE ID: CVE-2021-38882 State: PUBLISHED Published: 2021-11-16T16:55:16.824272Z Last Updated: 2024-09-16T23:15:52.567Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:N/AV:L/S:U/A:N/AC:L/I:H/PR:H/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: File Manipulation Description: IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6516426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209164
CVE ID: CVE-2021-38883 State: PUBLISHED Published: 2021-12-17T17:05:11.690686Z Last Updated: 2024-09-16T19:25:14.421Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/S:C/AC:L/I:L/PR:L/A:N/AV:N/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209165. Additi
ded functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209165. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209165
CVE ID: CVE-2021-38886 State: PUBLISHED Published: 2022-04-22T16:30:32.670783Z Last Updated: 2024-09-16T16:23:02.930Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/PR:N/I:L/A:N/UI:R/C:N/S:U/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 209399. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209399
erences: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209399 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-38887 State: PUBLISHED Published: 2021-11-10T14:55:10.882923Z Last Updated: 2024-09-17T00:37:19.657Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/I:N/AV:N/S:U/PR:L/UI:N/A:N/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6510178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209401
CVE ID: CVE-2021-38890 State: PUBLISHED Published: 2021-11-23T19:15:33.262957Z Last Updated: 2024-09-17T02:12:03.642Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/S:U/PR:N/AC:H/UI:N/AV:N/A:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Connect:Direct Web Services Problem Types: Obtain Information Description: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6518586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209507
CVE ID: CVE-2021-38891 State: PUBLISHED Published: 2021-11-23T19:15:34.650502Z Last Updated: 2024-09-16T23:41:39.770Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/S:U/AC:H/UI:N/AV:N/A:N/C:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Connect:Direct Web Services Problem Types: Obtain Information Description: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6518582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209508
CVE ID: CVE-2021-38892 State: REJECTED Published: 2022-01-12T17:10:11 Last Updated: 2022-02-11T17:41:02 Description: No description available.
CVE ID: CVE-2021-38893 State: PUBLISHED Published: 2021-12-21T19:10:14.320475Z Last Updated: 2024-09-17T00:26:52.814Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/I:L/PR:L/C:L/S:C/UI:N/AC:L/AV:N/A:N/RC:C/RL:O/E:H) Vendors: IBM Products: Cloud Pak for Automation, Business Process Manager Standard Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20
ng the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209512. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527782 - https://www.ibm.com/support/pages/node/6526488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209512
CVE ID: CVE-2021-38894 State: PUBLISHED Published: 2022-01-07T17:55:20.249096Z Last Updated: 2024-09-16T16:18:02.871Z Severity: LOW (CVSS 2.7 CVSS:3.0/S:U/UI:N/AV:N/PR:H/AC:L/I:N/C:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209515
CVE ID: CVE-2021-38895 State: PUBLISHED Published: 2022-01-07T17:55:21.811204Z Last Updated: 2024-09-16T23:55:44.245Z Severity: LOW (CVSS 3 CVSS:3.0/A:N/C:L/I:N/AC:H/PR:L/UI:R/AV:N/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: Security Verify Access Problem Types: Cross-Site Scripting Description: IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209563. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 209563. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6538418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209563
CVE ID: CVE-2021-38896 State: PUBLISHED Published: 2021-10-20T18:35:10.768446Z Last Updated: 2024-09-16T19:14:48.706Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/C:L/AV:N/I:L/S:C/AC:L/A:N/UI:R/E:H/RL:O/RC:C) Vendors: IBM Products: Qradar Advisor Problem Types: Cross-Site Scripting Description: IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6506461 -
9566. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6506461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209566
CVE ID: CVE-2021-38899 State: PUBLISHED Published: 2021-09-20T16:45:59.667005Z Last Updated: 2024-09-16T20:07:08.007Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/S:U/A:N/UI:N/I:N/AC:L/AV:L/PR:H/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Data Problem Types: Obtain Information Description: IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209575
CVE ID: CVE-2021-38900 State: PUBLISHED Published: 2021-12-21T19:10:16.020969Z Last Updated: 2024-09-17T01:40:57.148Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/A:N/AV:N/AC:L/UI:N/S:U/C:H/PR:H/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Business Automation Workflow, Cloud Pak for Automation Problem Types: Obtain Information Description: IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527776 - https://www.ibm.com/suppor
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6527776 - https://www.ibm.com/support/pages/node/6528296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209607
CVE ID: CVE-2021-38901 State: PUBLISHED Published: 2021-12-13T18:35:30.543202Z Last Updated: 2024-09-17T00:40:53.077Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AC:H/A:N/PR:N/S:U/C:H/I:N/AV:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6524924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209610
CVE ID: CVE-2021-38903 State: PUBLISHED Published: 2022-04-22T16:30:34.144090Z Last Updated: 2024-09-16T19:57:25.600Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/S:C/C:L/UI:R/A:N/I:L/PR:L/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to
ithin the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 209691. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209691 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-38904 State: PUBLISHED Published: 2022-04-22T16:30:35.618488Z Last Updated: 2024-09-16T23:01:48.443Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/I:N/AV:P/PR:N/UI:N/A:N/S:U/AC:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209693 - https://security.netapp.com/advisory/ntap-2022060
570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209693 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-38905 State: PUBLISHED Published: 2022-04-22T16:30:37.161093Z Last Updated: 2024-09-16T22:50:31.777Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AV:N/PR:L/S:U/AC:L/C:L/UI:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209697 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-38909 State: PUBLISHED Published: 2021-12-03T17:00:31.456970Z Last Updated: 2024-09-16T18:28:16.876Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AV:N/A:N/PR:L/C:L/UI:R/S:C/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/652051
: 209706. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209706 - https://security.netapp.com/advisory/ntap-20211223-0006/
CVE ID: CVE-2021-38910 State: PUBLISHED Published: 2022-03-10T19:50:22.002006Z Last Updated: 2024-09-16T19:31:42.892Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/AC:H/I:L/A:N/PR:N/AV:N/C:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: DataPower Gateway Problem Types: Bypass Security Description: IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. By sending a specially crafted JSON message, an attacker could exploit this vulnerability to modify structure and fields. IBM X-Force ID: 209824. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/656234
: 209824. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209824
CVE ID: CVE-2021-38911 State: PUBLISHED Published: 2021-10-19T15:15:16.168555Z Last Updated: 2024-09-17T02:52:18.423Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/PR:H/AC:H/AV:N/UI:N/I:N/C:H/A:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6505281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209940
CVE ID: CVE-2021-38915 State: PUBLISHED Published: 2021-10-12T18:55:13.061749Z Last Updated: 2024-09-17T00:51:00.939Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:H/PR:L/UI:N/I:N/C:H/AV:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6497499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/209947
CVE ID: CVE-2021-38917 State: PUBLISHED Published: 2021-12-10T17:50:11.461135Z Last Updated: 2024-09-16T17:19:14.549Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/PR:N/UI:N/I:H/AC:H/C:H/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Bypass Security Description: IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210018
CVE ID: CVE-2021-38918 State: PUBLISHED Published: 2022-01-05T16:30:11.969607Z Last Updated: 2024-09-16T20:47:29.123Z Severity: HIGH (CVSS 8.6 CVSS:3.0/I:N/AC:L/AV:N/UI:N/C:H/A:N/S:C/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Obtain Information Description: IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/210019