Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2937 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94646 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89783 - http://www-01.ibm.com/support/docview.wss?uid=swg21991887
CVE ID: CVE-2016-2938 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:13.821Z Vendors: n/a Products: IBM Domino 8.5.3.5, 8.5.3.6, 9.0.1, 8.5, 9.0, 8.5.1, 8.5.2, 8.5.3, 9.0.1.1, 8.0.2, 8.0, 8.0.1, 8.5.1.5, 8.5.2.4, 9.0.1.2, 8.5.0.1, 9.0.1.3, 8.5.1.4, 9.0.1.4, 9.0.1.5, 8.5.1.1, 9.0.1.6, 9.0.1.7 Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037383 - http://www.securityfocus.com/bid/94600 - http://www.ibm.com/support/docview.wss?uid=swg21992835
CVE ID: CVE-2016-2939 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:13.912Z Vendors: IBM Corporation Products: Domino Problem Types: Cross-Site Scripting Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94605 - http://www.securitytracker.com/id/1037383 - http://www.ibm.com/support/docview.wss?uid=swg21992835
CVE ID: CVE-2016-2940 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89735 - http://www.securityfocus.com/bid/94621 - http://www-01.ibm.com/support/docview.wss?uid=swg21991961
CVE ID: CVE-2016-2941 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-05T23:40:13.786Z Vendors: IBM Corporation Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg2C1000220 - http://www.securityfocus.com/bid/95978
CVE ID: CVE-2016-2942 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-05T23:40:13.765Z Vendors: IBM Corporation Products: UrbanCode Deploy Problem Types: Gain Privileges Description: IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95975 - http://www.ibm.com/support/docview.wss?uid=swg2C1000218
CVE ID: CVE-2016-2943 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89736 - http://www-01.ibm.com/support/docview.wss?uid=swg21991960 - http://www.securityfocus.com/bid/94617
CVE ID: CVE-2016-2944 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991878 - http://www.securityfocus.com/bid/94623 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89790
CVE ID: CVE-2016-2945 State: PUBLISHED Published: 2016-07-08T01:00:00 Last Updated: 2024-08-05T23:40:13.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91517 - http://www-01.ibm.com/support/docview.wss?uid=swg21984502 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450
CVE ID: CVE-2016-2946 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:13.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845 - http://www-01.ibm.com/support/docview.wss?uid=swg21984578 - http://www.securityfocus.com/bid/92389
CVE ID: CVE-2016-2947 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:13.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6
d 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allow remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991477 - http://www.securityfocus.com/bid/94518
CVE ID: CVE-2016-2948 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89781 - http://www-01.ibm.com/support/docview.wss?uid=swg21991889 - http://www.securityfocus.com/bid/94619
CVE ID: CVE-2016-2949 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89740 - http://www-01.ibm.com/support/docview.wss?uid=swg21991959 - http://www.securityfocus.com/bid/94608
CVE ID: CVE-2016-2950 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991886 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89784 - http://www.securityfocus.com/bid/94607
CVE ID: CVE-2016-2951 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991885 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785 - http://www.securityfocus.com/bid/94601
CVE ID: CVE-2016-2952 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89794 - http://www.securityfocus.com/bid/94598 - http://www-01.ibm.com/support/docview.wss?uid=swg21991871
CVE ID: CVE-2016-2953 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90295 - http://www-01.ibm.com/support/docview.wss?uid=swg21990888 - http://www.securityfocus.com/bid/94415 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90268
CVE ID: CVE-2016-2954 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:14.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988990 - http://www.securityfocus.com/bid/92543
CVE ID: CVE-2016-2955 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:13.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988531 - http://www.securityfocus.com/bid/92544
CVE ID: CVE-2016-2956 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T23:40:13.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21988990 - http://www.securityfocus.com/bid/92542
CVE ID: CVE-2016-2957 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:13.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94300 - http://www-01.ibm.com/support/docview.wss?uid=swg21990864 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039
CVE ID: CVE-2016-2958 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990864 - http://www.securityfocus.com/bid/94328 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039 - http://www.securitytracker.com/id/1039231
CVE ID: CVE-2016-2959 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T22:15:03.731Z Vendors: IBM Products: Sametime Problem Types: Denial of Service Description: IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113804 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2960 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:14.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984796 - http://www.securityfocus.com/bid/92354 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI61548 - http://www.securitytracker.
ww.securityfocus.com/bid/92354 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI61548 - http://www.securitytracker.com/id/1036514
CVE ID: CVE-2016-2961 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985017 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT15188
CVE ID: CVE-2016-2963 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:14.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89797 - http://www-01.ibm.com/support/docview.wss?uid=swg21991867 - http://www.securityfocus.com/bid/94596
CVE ID: CVE-2016-2964 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T23:31:41.757Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/113813 - http://www.ibm.com/support/docview.wss?uid=swg22006441 - http://www.securityfocus.com/bid/100572
CVE ID: CVE-2016-2965 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-17T00:46:21.638Z Vendors: IBM Products: Sametime Problem Types: Gain Access Description: IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113846 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/do
e.xforce.ibmcloud.com/vulnerabilities/113846 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2966 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T17:14:25.007Z Vendors: IBM Products: Sametime Problem Types: Gain Access Description: IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - http://www.securityfocus.com/bid/100572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113847
CVE ID: CVE-2016-2967 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T19:10:22.543Z Vendors: IBM Products: Sametime Problem Types: Cross-Site Scripting Description: IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime away message altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113848. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006441 - http://www.securityfocus.com/bid/100572 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
view.wss?uid=swg22006441 - http://www.securityfocus.com/bid/100572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113848
CVE ID: CVE-2016-2968 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:14.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985773
CVE ID: CVE-2016-2969 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-17T03:47:54.438Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113850 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2970 State: PUBLISHED Published: 2017-08-28T20:00:00Z Last Updated: 2024-09-17T02:06:38.953Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/113851 - http://www.securityfocus.com/bid/100529 - http://www.securitytracker.com/id/1039228 - http://www.ibm.com/support/docview.wss?uid=swg22006233
CVE ID: CVE-2016-2971 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T17:38:52.861Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Force ID: 113898. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113898 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2972 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-16T17:37:41.115Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113855 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2973 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-17T01:26:28.459Z Vendors: IBM Products: Sametime Problem Types: Cross-Site Scripting Description: IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113899. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/113899 - http://www.securityfocus.com/bid/100599 - http://www.securitytracker.com/id/1039231
bmcloud.com/vulnerabilities/113899 - http://www.securityfocus.com/bid/100599 - http://www.securitytracker.com/id/1039231 - http://www.ibm.com/support/docview.wss?uid=swg22006439
CVE ID: CVE-2016-2974 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-16T18:24:13.640Z Vendors: IBM Products: Sametime Problem Types: Obtain Information Description: IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113934 - http://www.ibm.com/support/docview.wss?uid=swg22006444