Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1466 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-16T17:03:03.170Z Vendors: IBM Products: SAN Volume Controller, Storwize V5000, Spectrum Virtualize Software, Storwize V7000 (2076), Storwize V3700, Storwize V3500, FlashSystem V9000, Spectrum Virtualize for Public Cloud Problem Types: Obtain Information Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397. Addi
ptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140397 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1467 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-16T18:14:17.029Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Storwize V7000 Unified (2073) Problem Types: Obtain Information Description: The IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to unauthenticated users. IBM X-Force ID: 140398. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104290 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140398
CVE ID: CVE-2018-1468 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T17:37:59.924Z Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140399 - http://www.ibm.com/support/docview.wss?uid=swg22015968
CVE ID: CVE-2018-1469 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T18:48:25.007Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HTTP requests. IBM X-Force ID: 140605. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140605 - http://www.ibm.com/support/docview.wss?uid=swg22014940
CVE ID: CVE-2018-1470 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-16T23:25:23.404Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks against the system. IBM X-Force ID: 140688. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - https://exchange.xforce.i
://www.securityfocus.com/bid/104885 - http://www.ibm.com/support/docview.wss?uid=ibm10716997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140688
CVE ID: CVE-2018-1471 State: REJECTED Published: 2018-04-27T15:00:00 Last Updated: 2018-05-04T12:57:01 Description: No description available.
CVE ID: CVE-2018-1472 State: REJECTED Published: N/A Last Updated: 2025-04-01T17:23:33.409Z Description: No description available.
CVE ID: CVE-2018-1473 State: PUBLISHED Published: 2018-04-27T15:00:00Z Last Updated: 2024-09-17T00:42:30.418Z Vendors: IBM Products: BigFix Platform Problem Types: Cross-Site Scripting Description: IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140691. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140691 - http://www.ibm.com/support/docview.wss?uid=swg22015754
CVE ID: CVE-2018-1474 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T22:41:13.775Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Gain Access Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site
the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information. IBM X-force ID: 140692. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140692
CVE ID: CVE-2018-1475 State: PUBLISHED Published: 2018-04-27T15:00:00Z Last Updated: 2024-09-16T19:45:41.321Z Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 140756. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140756 - http://www.ibm.com/support/docview.wss?uid=swg22015754
CVE ID: CVE-2018-1476 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T20:46:45.273Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140757
CVE ID: CVE-2018-1478 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-17T04:19:00.445Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Gain Access Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 140760. Additional Analyst Notes: - CVE Program Container: References: -
her attacks against the victim. IBM X-Force ID: 140760. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140760
CVE ID: CVE-2018-1479 State: PUBLISHED Published: 2018-04-27T15:00:00Z Last Updated: 2024-09-17T00:30:32.344Z Vendors: IBM Products: BigFix Platform Problem Types: Gain Access Description: IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 140761. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140761 - http://www.ibm.com/support/docview.wss?uid=swg22015754
CVE ID: CVE-2018-1480 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T16:32:48.618Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:C/UI:N/E:H/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Gain Access Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookies. If a Cross-Site Scripting vulnerability also existed attackers may be able to get the cookie values via malicious JavaScript and then hijack the user session. IBM X-Force ID: 140762. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.
M X-Force ID: 140762. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140762 - https://www.ibm.com/support/docview.wss?uid=ibm10733605
CVE ID: CVE-2018-1481 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T20:13:21.201Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 140763. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xfor
: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140763
CVE ID: CVE-2018-1483 State: PUBLISHED Published: 2018-04-11T16:00:00Z Last Updated: 2024-09-16T18:28:40.201Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140918. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22015317 - https://exchang
Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22015317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140918 - http://www.securitytracker.com/id/1040644
CVE ID: CVE-2018-1484 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T17:43:51.493Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 140969.
to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 140969. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140969
CVE ID: CVE-2018-1485 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T23:41:10.715Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 140970. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - ht
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10733605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140970
CVE ID: CVE-2018-1487 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T03:59:28.929Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041231 - https://ex
Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140972 - http://www.ibm.com/support/docview.wss?uid=swg22016505
CVE ID: CVE-2018-1488 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T03:55:08.500Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 140973. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016141 - http://www.securitytracker.com/id/1040968 - h
er: References: - http://www.ibm.com/support/docview.wss?uid=swg22016141 - http://www.securitytracker.com/id/1040968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140973
CVE ID: CVE-2018-1492 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T00:02:33.492Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:L/AC:L/AV:P/C:L/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, Rational Team Concert, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Rational Rhapsody Design Manager, Rational Quality Manager Problem Types: Gain Access Description: IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force I
ystem to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140977 - http://www.ibm.com/support/docview.wss?uid=ibm10716599
CVE ID: CVE-2018-1494 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-16T22:15:37.924Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141097. Additional Analyst Notes: - CVE Program Container: References: - ht
re within a trusted session. IBM X-Force ID: 141097. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141097
CVE ID: CVE-2018-1495 State: PUBLISHED Published: 2018-05-29T17:00:00.000Z Last Updated: 2025-02-13T16:27:16.918Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/AC:L/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: FlashSystem V900, FlashSystem V840 Problem Types: Denial of Service Description: IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of service. IBM X-Force ID: 141148. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141148 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012281 - http://www.ibm.co
xforce.ibmcloud.com/vulnerabilities/141148 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012281 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012280
CVE ID: CVE-2018-1496 State: PUBLISHED Published: 2018-05-31T21:00:00Z Last Updated: 2024-09-16T19:30:29.325Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141219. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
IBM X-Force ID: 141219. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104374 - http://www.ibm.com/support/docview.wss?uid=swg22015420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141219
CVE ID: CVE-2018-1498 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T19:41:33.648Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041763 - https://www.ibm.com/support/docview.wss?uid=ibm10730317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141223
CVE ID: CVE-2018-1501 State: PUBLISHED Published: 2020-08-26T19:00:35.998863Z Last Updated: 2024-09-16T23:55:32.803Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/I:N/S:U/AV:N/AC:L/UI:N/A:N/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID: 141226. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6321357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141226
CVE ID: CVE-2018-1502 State: PUBLISHED Published: 2018-05-01T14:00:00Z Last Updated: 2024-09-16T19:29:58.171Z Vendors: IBM Products: Content Manager Problem Types: Cross-Site Scripting Description: IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141338. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg22014917 - http://www.securitytracker.com/id/1040760 - https:
rences: - http://www-01.ibm.com/support/docview.wss?uid=swg22014917 - http://www.securitytracker.com/id/1040760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141338
CVE ID: CVE-2018-1503 State: PUBLISHED Published: 2018-07-23T13:00:00Z Last Updated: 2024-09-16T17:59:15.374Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer be transmitted via the affected channel. IBM X-Force ID: 141339. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104953 - http://www.ibm.com/support/docview.wss?uid=swg22015617 - http://www.securitytracker.com/i
securityfocus.com/bid/104953 - http://www.ibm.com/support/docview.wss?uid=swg22015617 - http://www.securitytracker.com/id/1041387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141339
CVE ID: CVE-2018-1504 State: PUBLISHED Published: 2018-12-06T14:00:00Z Last Updated: 2024-09-16T23:01:17.407Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: i2 Enterprise Insight Analysis Problem Types: Gain Access Description: IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 141340. Additional Analyst Notes: - CVE Program Container: References: - https:
acks against the victim. IBM X-Force ID: 141340. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141340 - https://www.ibm.com/support/docview.wss?uid=ibm10738699
CVE ID: CVE-2018-1505 State: PUBLISHED Published: 2018-12-06T14:00:00Z Last Updated: 2024-09-17T02:11:27.137Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: i2 Enterprise Insight Analysis Problem Types: Obtain Information Description: IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 141413. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141413 - https://www.ibm.com/support/docview.wss?uid=ibm10738699
CVE ID: CVE-2018-1507 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T22:55:39.563Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141415. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.w
-Force ID: 141415. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141415 - http://www.securityfocus.com/bid/104581