Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29760 State: PUBLISHED Published: 2021-10-06T17:10:33.052242Z Last Updated: 2024-09-17T02:01:43.734Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/PR:L/UI:N/I:L/AV:N/S:U/AC:L/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202213
CVE ID: CVE-2021-29761 State: PUBLISHED Published: 2021-10-06T17:10:34.695505Z Last Updated: 2024-09-16T23:36:24.490Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/A:N/C:L/AC:L/S:U/UI:N/I:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202265
CVE ID: CVE-2021-29763 State: PUBLISHED Published: 2021-09-16T15:50:18.694225Z Last Updated: 2024-09-16T20:36:26.858Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/I:N/AV:L/S:U/PR:N/A:H/UI:N/C:N/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489493 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202267 - https://security.netapp.com/advisory/ntap-20211029-0005/
CVE ID: CVE-2021-29764 State: PUBLISHED Published: 2021-10-06T17:10:36.253596Z Last Updated: 2024-09-16T16:24:05.784Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/PR:L/S:C/I:L/AV:N/UI:N/C:L/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 202268. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
ted session. IBM X-Force ID: 202268. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202268
CVE ID: CVE-2021-29765 State: PUBLISHED Published: 2021-08-04T14:00:17.097596Z Last Updated: 2024-09-16T23:42:11.518Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/PR:N/AV:N/A:N/I:N/C:H/UI:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Obtain Information Description: IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6478039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202476
CVE ID: CVE-2021-29766 State: PUBLISHED Published: 2021-07-26T12:10:40.796533Z Last Updated: 2024-09-16T23:50:56.206Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/UI:N/AC:L/C:L/I:N/A:N/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyze Problem Types: Obtain Information Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202680. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474881 - h
680. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202680
CVE ID: CVE-2021-29767 State: PUBLISHED Published: 2021-07-26T12:10:42.433126Z Last Updated: 2024-09-17T03:02:12.396Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/S:U/I:N/A:N/AV:N/UI:N/C:L/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analyst's Notebook Premium Problem Types: Obtain Information Description: IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474885 -
02681. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202681
CVE ID: CVE-2021-29768 State: PUBLISHED Published: 2022-06-24T15:35:22.929192Z Last Updated: 2024-09-16T23:56:04.505Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/I:N/UI:N/AC:L/A:N/S:U/C:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202682 - https://securit
//www.ibm.com/support/pages/node/6597241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202682 - https://security.netapp.com/advisory/ntap-20220729-0002/
CVE ID: CVE-2021-29769 State: PUBLISHED Published: 2021-07-26T12:10:44.050601Z Last Updated: 2024-09-16T22:45:23.280Z Severity: LOW (CVSS 3.1 CVSS:3.0/S:U/PR:N/AC:H/C:L/UI:R/AV:N/A:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analyze Problem Types: Obtain Information Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Fo
ie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202769
CVE ID: CVE-2021-29770 State: PUBLISHED Published: 2021-07-26T12:10:45.680049Z Last Updated: 2024-09-16T20:58:35.712Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/S:C/PR:L/AV:N/UI:R/C:N/AC:L/I:L/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: i2 Analyze Problem Types: Gain Access Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202771
CVE ID: CVE-2021-29771 State: PUBLISHED Published: 2021-11-02T16:00:29.020693Z Last Updated: 2024-09-16T17:53:11.405Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/S:C/AC:L/A:N/UI:R/C:L/PR:L/I:L/RL:O/E:H/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509614 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6509614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202773
CVE ID: CVE-2021-29772 State: PUBLISHED Published: 2021-08-26T19:25:25.958906Z Last Updated: 2024-09-17T02:47:38.353Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/PR:N/A:L/S:U/C:L/AC:H/I:L/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6483655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202774
CVE ID: CVE-2021-29773 State: PUBLISHED Published: 2021-09-15T17:55:18.863291Z Last Updated: 2024-09-17T02:42:53.724Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:U/UI:N/PR:L/C:L/AV:N/I:L/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 202865. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/202865
CVE ID: CVE-2021-29774 State: PUBLISHED Published: 2021-10-27T16:00:28.033842Z Last Updated: 2024-09-17T02:10:50.993Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:L/AV:N/S:U/C:H/I:H/UI:N/AC:H/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Rational Team Concert, Engineering Workflow Management Problem Types: Gain Privileges Description: IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025. Additional Analyst Notes: - CVE Program Container: References: - https://w
rtain configurations. IBM X-Force ID: 203025. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6508583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203025
CVE ID: CVE-2021-29775 State: PUBLISHED Published: 2021-06-28T15:55:26.875537Z Last Updated: 2024-09-16T16:52:52.973Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/C:L/UI:N/S:C/AC:L/A:N/PR:L/I:L/E:H/RL:O/RC:C) Vendors: IBM Products: Business Automation Workflow, Cloud Pak for Automation Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029. Add
tended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465127 - https://www.ibm.com/support/pages/node/6467057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203029
CVE ID: CVE-2021-29776 State: PUBLISHED Published: 2022-04-27T15:20:28.182985Z Last Updated: 2024-09-16T19:00:44.692Z Severity: LOW (CVSS 3.1 CVSS:3.0/C:L/AC:H/AV:N/UI:N/A:N/I:N/PR:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203030
CVE ID: CVE-2021-29777 State: PUBLISHED Published: 2021-06-24T18:45:30.905849Z Last Updated: 2024-09-16T20:58:36.206Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/A:H/I:N/AV:N/PR:L/AC:H/S:U/C:N/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466373 -
3031. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203031 - https://security.netapp.com/advisory/ntap-20210720-0006/
CVE ID: CVE-2021-29779 State: PUBLISHED Published: 2021-12-01T17:05:22.032908Z Last Updated: 2024-09-16T23:45:56.975Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/I:N/PR:N/A:N/C:H/UI:N/AV:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communications using man in the middle techniques. IBM X-Force ID: 203033. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
r: References: - https://www.ibm.com/support/pages/node/6520484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203033
CVE ID: CVE-2021-29780 State: PUBLISHED Published: 2021-07-19T16:00:28.498310Z Last Updated: 2024-09-16T22:08:53.084Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/PR:H/UI:N/I:L/S:U/AV:N/AC:L/C:L/A:L/E:U/RC:C/RL:O) Vendors: IBM Products: Resilient OnPrem Problem Types: Gain Access Description: IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6473131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203085
CVE ID: CVE-2021-29781 State: PUBLISHED Published: 2021-07-30T11:15:14.972092Z Last Updated: 2024-09-17T00:17:31.027Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/UI:N/A:H/I:H/PR:N/AV:N/S:U/AC:L/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Partner Engagement Manager Problem Types: Gain Privileges Description: IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/64
e ID: 203091. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203091
CVE ID: CVE-2021-29784 State: PUBLISHED Published: 2021-07-26T12:10:47.273597Z Last Updated: 2024-09-16T18:17:51.796Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/PR:L/AV:N/UI:N/AC:L/C:L/I:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: i2 Analyze Problem Types: Obtain Information Description: IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474875 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6474875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203168
CVE ID: CVE-2021-29785 State: PUBLISHED Published: 2022-01-20T19:40:12.352912Z Last Updated: 2024-09-17T04:14:56.968Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/C:H/A:N/UI:N/AC:H/AV:N/I:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security SOAR Problem Types: Obtain Information Description: IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 203169. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/65419
D: 203169. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6541974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203169
CVE ID: CVE-2021-29786 State: PUBLISHED Published: 2021-10-27T16:00:29.665687Z Last Updated: 2024-09-16T19:31:21.815Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:H/I:N/S:U/PR:L/AV:N/UI:N/AC:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management, Rational Team Concert, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Engineering Workflow Management Problem Types: Obtain Information Description: IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
nticated user. IBM X-Force ID: 203172. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6508583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203172
CVE ID: CVE-2021-29788 State: PUBLISHED Published: 2022-07-18T17:00:22.945922Z Last Updated: 2024-09-17T00:01:08.109Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/UI:R/A:N/AV:N/I:L/AC:L/C:L/RC:C/RL:O/E:H) Vendors: IBM Products: Engineering Requirements Quality Assistant On-Premises Problem Types: Cross-Site Scripting Description: IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203310. Additional Analyst Notes: - CVE Progr
eading to credentials disclosure within a trusted session. IBM X-Force ID: 203310. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203310
CVE ID: CVE-2021-29790 State: PUBLISHED Published: 2022-07-18T17:00:27.433570Z Last Updated: 2024-09-16T23:31:08.656Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AC:L/I:L/AV:N/UI:R/A:N/S:C/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Engineering Requirements Quality Assistant On-Premises Problem Types: Cross-Site Scripting Description: IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203440. Additional Analyst Notes: - CVE Progr
eading to credentials disclosure within a trusted session. IBM X-Force ID: 203440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203440
CVE ID: CVE-2021-29792 State: PUBLISHED Published: 2021-07-12T16:05:29.297973Z Last Updated: 2024-09-16T18:56:21.655Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/A:L/UI:N/S:U/AC:L/C:L/AV:N/PR:H/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Event Streams Problem Types: Gain Privileges Description: IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203450
CVE ID: CVE-2021-29794 State: PUBLISHED Published: 2021-07-12T16:05:30.882098Z Last Updated: 2024-09-17T03:38:07.991Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/AV:N/PR:N/I:N/AC:H/A:N/S:U/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Obtain Information Description: IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469953 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6469953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203556
CVE ID: CVE-2021-29795 State: PUBLISHED Published: 2021-09-21T16:00:14.633936Z Last Updated: 2024-09-17T02:11:21.194Z Severity: MEDIUM (CVSS 6 CVSS:3.0/PR:H/S:C/AV:L/A:H/C:N/UI:N/AC:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: PowerVM Hypervisor Problem Types: Denial of Service Description: IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the system. IBM X-Force ID: 203557. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203557
CVE ID: CVE-2021-29798 State: PUBLISHED Published: 2021-10-06T17:10:37.788924Z Last Updated: 2024-09-17T01:31:26.083Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/UI:N/AV:N/I:L/S:U/AC:L/C:L/A:L/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495925 -
3734. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6495925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203734