Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4752 State: PUBLISHED Published: 2014-09-23T22:00:00 Last Updated: 2024-08-06T11:27:36.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking
0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232 - http://secunia.com/advisories/54512
CVE ID: CVE-2014-4756 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to hijack sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24038045 - http://secunia.com/advisories/60709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94444 - http://www.securityfocus.com/bid/69645 - http://www-01.ibm.com/support/docview.wss?uid=swg21681449
CVE ID: CVE-2014-4757 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T11:27:36.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Outlook Extension in IBM Content Collector 4.0.0.x before 4.0.0.0-ICC-OE-IF004 allows local users to bypass the intended Reviewer privilege requirement and read e-mail messages from an arbitrary mailbox by invoking the Search function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94456 - http://www-01.ibm.com/support/docview.wss?uid=swg21679144
CVE ID: CVE-2014-4758 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T11:27:36.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50215 - http://www-01.ibm.com/support/docview.wss?uid=swg21680795 - http://secunia.com/advisories/60851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94485
CVE ID: CVE-2014-4759 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T11:27:36.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94486 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871 - http://www-01.ibm.com/support/docview.wss?uid=swg21680809
CVE ID: CVE-2014-4760 State: PUBLISHED Published: 2014-08-12T01:00:00 Last Updated: 2024-08-06T11:27:36.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0 before CF01 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680230 - http://secunia.com/advisories/60597 - http://www.securitytracker.com/id/1030669 - https://exchange.xforce
=swg21680230 - http://secunia.com/advisories/60597 - http://www.securitytracker.com/id/1030669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94657 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI19877
CVE ID: CVE-2014-4761 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T11:27:36.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote authenticated users to discover credentials by reading HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI22104 - http://secunia.com/advisories/61126 - http://www-01.ibm.com/support/docview.wss?uid=swg21684652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94658
CVE ID: CVE-2014-4762 State: PUBLISHED Published: 2014-09-12T01:00:00 Last Updated: 2024-08-06T11:27:36.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61204 - http://www-01.ibm.com/support/docview.wss?uid=swg21681998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94659 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI21973
CVE ID: CVE-2014-4763 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2024-08-06T11:27:36.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Content Navigator in Content Engine in IBM FileNet Content Manager 5.2.x before 5.2.0.3-P8CPE-IF003 and Content Foundation 5.2.x before 5.2.0.3-P8CPE-IF003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94660 - http://www-01.ibm.com/support/docview.wss?uid=swg21679930 - http://www-01
ge.xforce.ibmcloud.com/vulnerabilities/94660 - http://www-01.ibm.com/support/docview.wss?uid=swg21679930 - http://www-01.ibm.com/support/docview.wss?uid=swg21685574 - http://secunia.com/advisories/61127
CVE ID: CVE-2014-4764 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T11:27:36.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94723 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI21189 - http://www.securityfocus.com/bid/69301 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249
CVE ID: CVE-2014-4765 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T11:27:36.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote attackers to obtain sensitive directory information by reading an unspecified error message. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21685289 - https://exchange.xfor
- CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21685289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94757
CVE ID: CVE-2014-4766 State: PUBLISHED Published: 2014-10-23T01:00:00 Last Updated: 2024-08-06T11:27:36.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback (RAP) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94793 - http://www-01.ibm.com/support/docview.wss?uid=swg21687361 - http://secunia.com/advisories/61847
CVE ID: CVE-2014-4767 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T11:27:36.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94832 - http://www.securityfocus.com/bid/69297 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI21284
CVE ID: CVE-2014-4768 State: PUBLISHED Published: 2015-06-28T22:00:00 Last Updated: 2024-08-06T11:27:36.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Unified Extensible Firmware Interface (UEFI) on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098278
CVE ID: CVE-2014-4769 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T11:27:36.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50553 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49897 - https://exchange.xforce.ibmcloud.com/
.wss?uid=swg1JR50553 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94836 - http://www-01.ibm.com/support/docview.wss?uid=swg21685464 - http://www.securityfocus.com/bid/70872
CVE ID: CVE-2014-4770 State: PUBLISHED Published: 2014-09-23T22:00:00 Last Updated: 2024-08-06T11:27:36.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61423 - http://www.kb.cert.org/vuls/id/573356 - http://www-01.ibm.com/support/docview.wss?uid=swg21682767 - http://secunia.com/advisories/61418 - https://exchange.xfo
- http://www-01.ibm.com/support/docview.wss?uid=swg21682767 - http://secunia.com/advisories/61418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95209 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055 - http://www.securityfocus.com/bid/69981
CVE ID: CVE-2014-4771 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T11:27:36.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveraging PCF query privileges for a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV69190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94842 - http://www-01.ibm.com/support/docview.wss?uid=swg21696120
CVE ID: CVE-2014-4774 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T11:27:36.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers to hijack the authentication of arbitrary users via vectors involving a FRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21701389
CVE ID: CVE-2014-4775 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T11:27:36.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94917 - http://www-01.ibm.com/support/docview.w
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94917 - http://www-01.ibm.com/support/docview.wss?uid=swg21681640
CVE ID: CVE-2014-4776 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T11:27:36.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74437 - http://www-01.ibm.com/support/docview.wss?uid=swg21713641 - http://www.securitytracker.com/id/1032256
CVE ID: CVE-2014-4778 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T11:27:36.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21701389
CVE ID: CVE-2014-4781 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T11:27:36.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote attackers to obtain sensitive Alert management-services API information via a network-tracing attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21693053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95028
CVE ID: CVE-2014-4782 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T11:27:36.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21693053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95029
CVE ID: CVE-2014-4783 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95030 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://sec
hange.xforce.ibmcloud.com/vulnerabilities/95030 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996
CVE ID: CVE-2014-4784 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows remote attackers to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95031 - http://www-01.ibm.com/support/
ram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95031 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996 - http://www.securityfocus.com/bid/69698
CVE ID: CVE-2014-4785 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95032 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996 - htt
rabilities/95032 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996 - http://www.securityfocus.com/bid/69694
CVE ID: CVE-2014-4786 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - https://exchange.xfor
- CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95033 - http://www.securityfocus.com/bid/69720 - http://secunia.com/advisories/60996
CVE ID: CVE-2014-4787 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95034 - http://www.securityfocus.com/bid/6
a.com/advisories/60996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95034 - http://www.securityfocus.com/bid/69722
CVE ID: CVE-2014-4788 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95058 - http://www-01.ibm.com/support/docview.wss?uid=swg21682450
CVE ID: CVE-2014-4789 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:27:36.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682450 - http://secunia.com/advisories/60996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95059
CVE ID: CVE-2014-4790 State: PUBLISHED Published: 2014-08-26T10:00:00 Last Updated: 2024-08-06T11:27:36.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 and Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 do not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue. Additional Analyst Notes: - CVE Program
tive information, via a crafted web site, related to a "frame injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60480 - http://www-01.ibm.com/support/docview.wss?uid=swg21681277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93195 - http://secunia.com/advisories/60481 - http://www-01.ibm.com/support/docview.wss?uid=swg21680665
CVE ID: CVE-2014-4792 State: PUBLISHED Published: 2014-09-12T01:00:00 Last Updated: 2024-08-06T11:27:36.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95204 - http://secunia.com/advisories/61204 - http://www-01.ibm.com/support/docview.wss?uid=swg21681998 - http://www-01.ibm.com/support/docview.wss?uid
sories/61204 - http://www-01.ibm.com/support/docview.wss?uid=swg21681998 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI23334