Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1533 State: PUBLISHED Published: 2018-01-10T17:00:00Z Last Updated: 2024-09-16T17:38:41.574Z Vendors: IBM Products: Security Access Manager Problem Types: Cross-Site Scripting Description: IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130675 - http://www.ibm.com/sup
ww.securitytracker.com/id/1040168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130675 - http://www.ibm.com/support/docview.wss?uid=swg22012327 - http://www.securityfocus.com/bid/102496
CVE ID: CVE-2017-1534 State: PUBLISHED Published: 2018-01-10T17:00:00Z Last Updated: 2024-09-17T00:05:31.546Z Vendors: IBM Products: Security Access Manager Problem Types: Gain Access Description: IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676. Add
tacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130676 - http://www.ibm.com/support/docview.wss?uid=swg22008936 - http://www.securitytracker.com/id/1040169 - http://www.securityfocus.com/bid/102509
CVE ID: CVE-2017-1535 State: PUBLISHED Published: 2017-08-29T21:00:00Z Last Updated: 2024-09-17T00:46:44.696Z Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130677 - http://www.securityfocus.com/bid/100834 - http://www.ibm.com/support/docview.wss?uid=swg22007
m/vulnerabilities/130677 - http://www.securityfocus.com/bid/100834 - http://www.ibm.com/support/docview.wss?uid=swg22007242
CVE ID: CVE-2017-1536 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-16T22:45:25.465Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130733 - http://www.securityfocus.com/bid/102183
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130733 - http://www.securityfocus.com/bid/102183 - http://www.ibm.com/support/docview.wss?uid=swg22008031
CVE ID: CVE-2017-1538 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T13:32:29.977Z Vendors: IBM Products: IBM Financial Transaction Manager Problem Types: other Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130735 - http://www.ibm.com/support/docview.wss?uid=swg22008385
CVE ID: CVE-2017-1539 State: PUBLISHED Published: 2017-09-26T17:00:00Z Last Updated: 2024-09-16T17:18:52.638Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Gain Privileges Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100967 - http://www.ibm.com/support/docview.wss?uid=swg22007451 - https://exchange.xforce.ibmcloud.com/vulne
cus.com/bid/100967 - http://www.ibm.com/support/docview.wss?uid=swg22007451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130807
CVE ID: CVE-2017-1540 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T19:36:50.085Z Vendors: IBM Products: Rational DOORS Problem Types: Cross-Site Scripting Description: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102890 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - https://exchange.xforce.ibmcloud.com/vulnerabilit
/bid/102890 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130808
CVE ID: CVE-2017-1541 State: PUBLISHED Published: 2017-10-03T17:00:00Z Last Updated: 2024-09-16T22:56:02.488Z Vendors: IBM Products: AIX Problem Types: Denial of Service Description: A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100915 - http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc - http://www.securityfocus.com/bid/100914 - http://www.securitytracker.com/id/1039372 - https://exchange.xforce.ibmcloud.com/vulnerabilit
rityfocus.com/bid/100914 - http://www.securitytracker.com/id/1039372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130809
CVE ID: CVE-2017-1544 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-17T00:06:37.021Z Severity: LOW (CVSS 2.4 CVSS:3.0/A:N/AC:L/AV:P/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - https://exchange.x
- http://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130812
CVE ID: CVE-2017-1545 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-17T00:56:39.534Z Vendors: IBM Products: Rational DOORS Problem Types: Gain Access Description: IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/130914 - http://www.securityfocus.com/bid/102896 - http://www.ibm.com/support/docview.wss?uid=swg22012789
CVE ID: CVE-2017-1546 State: PUBLISHED Published: 2017-12-13T18:00:00Z Last Updated: 2024-09-17T01:36:14.452Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130915. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130915 - http:/
rences: - http://www.securityfocus.com/bid/101895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/130915 - http://www.ibm.com/support/docview.wss?uid=swg22010321
CVE ID: CVE-2017-1548 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-17T03:38:40.460Z Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131288 - http://www.ibm.com/support/docview.wss?uid=swg22010738 - http://www.securityfocus.com/bid/102187
CVE ID: CVE-2017-1549 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-16T19:20:51.437Z Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131289 - http://www.securityfocus.com/bid/102037 - http://www.ibm.com/support/docview.wss?u
ibmcloud.com/vulnerabilities/131289 - http://www.securityfocus.com/bid/102037 - http://www.ibm.com/support/docview.wss?uid=swg22010759
CVE ID: CVE-2017-1550 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-17T02:52:08.734Z Vendors: IBM Products: Sterling File Gateway Problem Types: Gain Access Description: IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131290 - http://www.securityfocus.com/bid/102184 - http://www.ibm.com/support/docview.wss?uid=swg22010758
CVE ID: CVE-2017-1551 State: PUBLISHED Published: 2017-09-25T16:00:00Z Last Updated: 2024-09-16T17:33:11.900Z Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131
ces: - http://www.ibm.com/support/docview.wss?uid=swg22008372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131291
CVE ID: CVE-2017-1552 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-16T16:39:14.155Z Vendors: IBM Products: BigInsights Problem Types: Gain Access Description: IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 131396. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilit
References: - http://www.ibm.com/support/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131396 - http://www.securityfocus.com/bid/101588
CVE ID: CVE-2017-1553 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-16T17:18:24.860Z Vendors: IBM Products: BigInsights Problem Types: Cross-Site Scripting Description: IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131397 - http://www.securityfoc
pport/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131397 - http://www.securityfocus.com/bid/101588
CVE ID: CVE-2017-1554 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-17T00:16:53.084Z Vendors: IBM Products: BigInsights Problem Types: Gain Access Description: IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131398. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
rences: - http://www.ibm.com/support/docview.wss?uid=swg22009192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131398 - http://www.securityfocus.com/bid/101588
CVE ID: CVE-2017-1555 State: PUBLISHED Published: 2017-09-25T16:00:00Z Last Updated: 2024-09-16T22:01:43.970Z Vendors: IBM Products: API Connect Problem Types: Bypass Security Description: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131545 - http://www.ibm.com/support/docview.wss?uid=swg22008588 - http://www.securityfocus.com/bid/100973
CVE ID: CVE-2017-1556 State: PUBLISHED Published: 2017-09-13T18:00:00Z Last Updated: 2024-09-17T01:51:42.744Z Vendors: IBM Products: API Connect Problem Types: Denial of Service Description: IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100831 - http://www.ibm.com/support/docview.wss?uid=swg22008315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131546
CVE ID: CVE-2017-1557 State: PUBLISHED Published: 2018-01-02T17:00:00Z Last Updated: 2024-09-16T17:47:56.777Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131547 - http://www.securityfocus.com/bid/102418 - http://www.ibm.com/support/docview.wss?uid=swg22004378
CVE ID: CVE-2017-1558 State: PUBLISHED Published: 2017-12-13T18:00:00Z Last Updated: 2024-09-16T16:43:14.217Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548. Additional Analys
in highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102211 - http://www.ibm.com/support/docview.wss?uid=swg22010595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131548
CVE ID: CVE-2017-1559 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-17T03:08:04.912Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:U/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Software Architect Design Manager, Rational Team Concert, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Rational Quality Manager Problem Types: Obtain Information Description: Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758. Additional Analyst Notes: - CVE Program Container
attacker that intercepts vulnerable requests. IBM X-Force ID: 131758. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131758 - https://www-prd-trops.events.ibm.com/node/715709
CVE ID: CVE-2017-1560 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-17T00:26:11.226Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131759. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131759 - http://www.securityfocus.com/bid/101895 - http://
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131759 - http://www.securityfocus.com/bid/101895 - http://www.ibm.com/support/docview.wss?uid=swg22010321
CVE ID: CVE-2017-1561 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T03:02:56.165Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131760. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131760 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1562 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T17:09:06.219Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131761. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131761 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1563 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T17:09:01.742Z Vendors: IBM Products: Rational DOORS Problem Types: Cross-Site Scripting Description: IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131763 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - http://www.securityfocus.com/
loud.com/vulnerabilities/131763 - http://www.ibm.com/support/docview.wss?uid=swg22012789 - http://www.securityfocus.com/bid/102862
CVE ID: CVE-2017-1564 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T01:06:43.254Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131764. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/131764 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1565 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T22:45:13.227Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131765. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/131765