Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22368 State: PUBLISHED Published: 2022-05-03T18:20:13.382615Z Last Updated: 2024-09-16T22:45:44.339Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/A:N/S:U/C:H/PR:N/UI:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 221012. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6579139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221012
CVE ID: CVE-2022-22369 State: PUBLISHED Published: 2022-08-10T16:50:19.326494Z Last Updated: 2024-09-17T00:56:33.232Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/S:U/PR:N/A:H/AV:L/UI:N/C:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Workload Scheduler Problem Types: Denial of Service Description: IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system to crash. IBM X-Force ID: 221187. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6610903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221187
CVE ID: CVE-2022-22370 State: PUBLISHED Published: 2022-07-08T17:45:19.536069Z Last Updated: 2024-09-16T16:33:20.269Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/PR:L/AC:L/C:L/S:C/UI:R/I:L/AV:N/RL:O/RC:C/E:H) Vendors: IBM Products: Security Verify Access Problem Types: Cross-Site Scripting Description: IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 221194. Additional Analyst Notes: - CVE Program Container: References: - https://
hin a trusted session. IBM X-Force ID: 221194. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221194
CVE ID: CVE-2022-22371 State: PUBLISHED Published: 2023-01-04T17:31:51.591Z Last Updated: 2025-04-10T13:54:02.980Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: CWE-613 Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852461 - https://exchange.xforce.ibmcloud.com/vulnerab
lnrichment: References: - https://www.ibm.com/support/pages/node/6852461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221195
CVE ID: CVE-2022-22373 State: PUBLISHED Published: 2022-07-01T18:01:10.061754Z Last Updated: 2024-09-16T22:56:52.615Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:A/A:N/I:L/UI:N/C:L/AC:L/S:U/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6600235 - htt
3. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6600235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221323
CVE ID: CVE-2022-22374 State: PUBLISHED Published: 2022-03-24T17:20:11.247513Z Last Updated: 2024-09-16T18:45:13.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/C:N/AV:N/I:L/AC:H/S:U/UI:N/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Power 9 AC922 Problem Types: Denial of Service Description: The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6565075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221442
CVE ID: CVE-2022-22375 State: PUBLISHED Published: 2023-10-17T01:21:58.685Z Last Updated: 2024-09-13T20:18:45.483Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-434 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 221681. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221681
CVE ID: CVE-2022-22377 State: PUBLISHED Published: 2023-10-17T00:36:36.434Z Last Updated: 2024-09-13T16:17:43.723Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-311 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 221827. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.c
ID: 221827. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221827
CVE ID: CVE-2022-22380 State: PUBLISHED Published: 2023-10-17T01:25:30.232Z Last Updated: 2024-09-13T18:07:25.196Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-295 Description: IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221957
CVE ID: CVE-2022-22384 State: PUBLISHED Published: 2023-10-17T00:43:12.513Z Last Updated: 2024-09-13T16:16:06.591Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-20 Description: IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input validation. IBM X-Force ID: 221961. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221961
CVE ID: CVE-2022-22385 State: PUBLISHED Published: 2023-10-17T01:11:48.947Z Last Updated: 2024-09-13T16:12:35.194Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-319 Description: IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221962
CVE ID: CVE-2022-22386 State: PUBLISHED Published: 2023-10-17T01:08:15.928Z Last Updated: 2024-09-13T16:14:52.599Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-311 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 221963. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.c
ID: 221963. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221963
CVE ID: CVE-2022-22387 State: PUBLISHED Published: 2022-09-28T15:55:13.564Z Last Updated: 2025-05-20T20:34:16.532Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AC:L/S:C/AV:N/UI:R/C:L/PR:L/A:N/E:H/RL:O/RC:C) Vendors: IBM Products: Application Gateway Problem Types: Cross-Site Scripting Description: IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 221965. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/n
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6824247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221965
CVE ID: CVE-2022-22389 State: PUBLISHED Published: 2022-06-24T16:45:17.882277Z Last Updated: 2024-09-16T17:18:40.685Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/PR:L/AC:L/A:H/C:N/AV:N/S:U/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user. IBM X-Force ID: 2219740. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6598047 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6598047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221970 - https://security.netapp.com/advisory/ntap-20220729-0007/
CVE ID: CVE-2022-22390 State: PUBLISHED Published: 2022-06-24T16:45:19.526105Z Last Updated: 2024-09-16T16:43:54.489Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/PR:N/UI:N/A:N/C:H/I:N/S:U/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221973 - https://s
https://www.ibm.com/support/pages/node/6597993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221973 - https://security.netapp.com/advisory/ntap-20220729-0007/
CVE ID: CVE-2022-22391 State: PUBLISHED Published: 2022-04-14T17:35:10.761297Z Last Updated: 2024-09-16T22:56:38.032Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AV:N/C:L/A:N/S:U/PR:L/UI:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Aspera High-Speed Transfer Endpoint, Aspera High-Speed Transfer Server Problem Types: Obtain Information Description: IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6571735 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6571735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222059
CVE ID: CVE-2022-22392 State: PUBLISHED Published: 2022-04-25T15:20:17.203231Z Last Updated: 2024-09-16T16:37:41.303Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/PR:H/AC:L/S:U/I:H/UI:R/C:H/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Workspace Problem Types: Gain Access Description: IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222066
CVE ID: CVE-2022-22393 State: PUBLISHED Published: 2022-05-13T16:15:20.221200Z Last Updated: 2024-09-17T00:46:08.186Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AV:N/C:L/UI:N/I:N/S:U/PR:L/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Obtain Information Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6585704
222078. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6585704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222078
CVE ID: CVE-2022-22394 State: PUBLISHED Published: 2022-03-21T16:20:14.517082Z Last Updated: 2024-09-16T17:24:06.828Z Severity: HIGH (CVSS 7.5 CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Server Problem Types: Gain Privileges Description: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
to the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6564745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222147
CVE ID: CVE-2022-22396 State: PUBLISHED Published: 2022-06-06T16:30:14.969227Z Last Updated: 2024-09-16T16:18:18.645Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/I:N/A:N/AV:N/AC:L/S:C/UI:N/PR:H/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are not printed. IBM X-Force ID: 222231. Additional Analyst Notes: - CVE Program Container: References: - htt
ertificate are not printed. IBM X-Force ID: 222231. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6591505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222231
CVE ID: CVE-2022-22399 State: PUBLISHED Published: 2024-03-05T19:58:53.516Z Last Updated: 2024-08-03T03:14:54.693Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-644 Description: IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 222562. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/
tional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6618959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222562
CVE ID: CVE-2022-22401 State: PUBLISHED Published: 2023-09-08T21:21:08.972Z Last Updated: 2024-09-25T20:03:45.787Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: 693 Protection Mechanism Failure Description: IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information. IBM X-Force ID: 222567. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222567
CVE ID: CVE-2022-22402 State: PUBLISHED Published: 2023-09-08T21:22:48.458Z Last Updated: 2024-09-25T20:03:30.294Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-79 Description: IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 222571. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xfo
Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222571
CVE ID: CVE-2022-22404 State: PUBLISHED Published: 2022-04-01T16:45:31.249259Z Last Updated: 2024-09-16T19:15:51.585Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: Denial of Service Description: IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6568359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222575
CVE ID: CVE-2022-22405 State: PUBLISHED Published: 2023-09-08T20:12:02.057Z Last Updated: 2024-09-26T14:23:00.364Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-311 Description: IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 222576. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - htt
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222576
CVE ID: CVE-2022-22409 State: PUBLISHED Published: 2023-09-08T21:19:00.311Z Last Updated: 2024-09-26T14:41:23.222Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-200 Description: IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused by an insecure configuration. IBM X-Force ID: 222592. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222592
CVE ID: CVE-2022-22410 State: PUBLISHED Published: 2022-04-06T15:40:11.091086Z Last Updated: 2024-09-17T03:08:26.329Z Severity: LOW (CVSS 3.9 CVSS:3.0/PR:H/UI:R/A:L/AC:H/S:U/C:L/I:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Watson Query Problem Types: Gain Privileges Description: IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6569235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
r: References: - https://www.ibm.com/support/pages/node/6569235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/222763
CVE ID: CVE-2022-22411 State: PUBLISHED Published: 2022-08-10T16:50:23.637725Z Last Updated: 2024-09-17T04:05:16.559Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:H/PR:L/S:C/AV:N/A:N/UI:N/C:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Scale DAS Problem Types: Obtain Information Description: IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow the attacker to manipulate cluster resources due to excessive permissions. IBM X-Force ID: 223016. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6610277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223016
CVE ID: CVE-2022-22412 State: PUBLISHED Published: 2022-07-26T14:25:15.818719Z Last Updated: 2024-09-16T22:08:21.327Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/C:H/AC:H/A:N/S:U/I:N/AV:P/PR:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machine) to obtain a login access token. IBM X-Force ID: 223019. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6607045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223019
CVE ID: CVE-2022-22413 State: PUBLISHED Published: 2022-05-12T15:30:18.162934Z Last Updated: 2024-09-17T00:02:08.181Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/I:L/UI:N/PR:L/A:L/AC:H/C:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Data Manipulation Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 223022. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6585628 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6585628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223022
CVE ID: CVE-2022-22414 State: PUBLISHED Published: 2022-06-20T16:25:17.965255Z Last Updated: 2024-09-16T22:51:08.950Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/S:U/AC:H/UI:N/C:H/AV:L/PR:N/I:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/223026