Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1817 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T01:46:03.556Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150021. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1500
ditional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150021 - https://www.ibm.com/support/docview.wss?uid=ibm10737069
CVE ID: CVE-2018-1818 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T23:16:29.913Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 150022. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10737073 - https://exchange.xforce.ibmclou
ogram Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10737073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150022
CVE ID: CVE-2018-1819 State: PUBLISHED Published: 2018-10-04T15:00:00Z Last Updated: 2024-09-16T23:01:26.169Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Data Manipulation Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.
k-end database. IBM X-force ID: 150023. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10732361 - http://www.ibm.com/support/docview.wss?uid=ibm10732357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150023 - http://www.ibm.com/support/docview.wss?uid=ibm10732367
CVE ID: CVE-2018-1820 State: PUBLISHED Published: 2018-09-27T19:00:00Z Last Updated: 2024-09-17T03:55:04.686Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150096. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm107322
. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10732287 - http://www.securitytracker.com/id/1041751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150096
CVE ID: CVE-2018-1821 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T23:00:28.431Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Operational Decision Management Problem Types: Obtain Information Description: IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150170. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm107
170. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10744149 - http://www.securityfocus.com/bid/106325 - https://www.exploit-db.com/exploits/46017/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/150170
CVE ID: CVE-2018-1822 State: PUBLISHED Published: 2018-10-18T16:00:00.000Z Last Updated: 2025-02-13T16:27:18.074Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: FlashSystem 900 Problem Types: Bypass Security Description: IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the system, resulting in the ability to remotely change the superuser password. This can be used by an attacker to gain administrative control or to deny service. IBM X-Force ID: 150296. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
96. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150296 - http://www.ibm.com/support/docview.wss?uid=ibm10732962
CVE ID: CVE-2018-1823 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T17:43:20.130Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150426. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.ws
Force ID: 150426. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150426 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1824 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T18:49:36.020Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150427. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.ws
Force ID: 150427. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150427 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1825 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T23:56:45.596Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150428. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.ws
Force ID: 150428. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150428 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1826 State: PUBLISHED Published: 2019-06-27T13:45:29.542976Z Last Updated: 2024-09-17T00:42:16.833Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/PR:L/UI:R/AC:L/A:N/C:L/S:C/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-site scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150429. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 150429. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150429
CVE ID: CVE-2018-1827 State: PUBLISHED Published: 2019-06-27T13:45:29.587288Z Last Updated: 2024-09-17T01:00:37.082Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AV:N/UI:R/A:N/AC:L/I:L/S:C/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150430. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 150430. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150430
CVE ID: CVE-2018-1828 State: PUBLISHED Published: 2019-06-27T13:45:29.629889Z Last Updated: 2024-09-17T00:31:41.218Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/PR:L/I:L/S:C/C:L/AC:L/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150431. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 150431. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150431
CVE ID: CVE-2018-1829 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T19:36:31.822Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-site scripting Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150432. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.ws
Force ID: 150432. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150432 - http://www.securityfocus.com/bid/107433
CVE ID: CVE-2018-1833 State: PUBLISHED Published: 2018-12-18T16:00:00Z Last Updated: 2024-09-17T02:27:49.280Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Event Streams Problem Types: Gain Access Description: IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106330 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
m Container: References: - http://www.securityfocus.com/bid/106330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150507 - https://www.ibm.com/support/docview.wss?uid=ibm10787535
CVE ID: CVE-2018-1834 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-17T01:01:02.402Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate their privileges to root through a symbolic link attack. IBM X-Force ID: 150511. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105885 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - ht
ner: References: - http://www.securityfocus.com/bid/105885 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - http://www.securitytracker.com/id/1042086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150511
CVE ID: CVE-2018-1835 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-17T03:44:19.260Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Daeja ViewONE Problem Types: Obtain Information Description: IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733815 - https://exchange.xforc
: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150514
CVE ID: CVE-2018-1836 State: PUBLISHED Published: 2019-03-19T13:50:17.228019Z Last Updated: 2024-09-16T20:37:04.237Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/C:L/UI:R/PR:L/I:L/S:C/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: MQ Problem Types: Cross-Site Scripting Description: IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
sion. IBM X-Force ID: 150661. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10734457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150661 - http://www.securityfocus.com/bid/107530
CVE ID: CVE-2018-1838 State: PUBLISHED Published: 2018-10-12T05:00:00Z Last Updated: 2024-09-17T02:33:01.275Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper handling of passwords. IBM X-Force ID: 150811. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10734167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150811
CVE ID: CVE-2018-1840 State: PUBLISHED Published: 2018-12-03T15:00:00Z Last Updated: 2024-09-16T18:04:17.343Z Severity: MEDIUM (CVSS 6 CVSS:3.0/A:L/AC:H/AV:N/C:L/I:L/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xf
ion Server. IBM X-Force ID: 150813. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150813 - https://www.ibm.com/support/docview.wss?uid=ibm10735767 - http://www.securityfocus.com/bid/106141
CVE ID: CVE-2018-1841 State: PUBLISHED Published: 2018-11-19T14:00:00Z Last Updated: 2024-09-17T03:07:55.993Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. IBM X-Force ID: 150901. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150901 - http://www.securityfocus.com/bid/105980 - https://www.ibm.com/support/docview.wss?uid=ibm10739851
CVE ID: CVE-2018-1842 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T17:48:44.044Z Severity: LOW (CVSS 3.6 CVSS:3.0/A:N/AC:H/AV:L/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Bypass Security Description: IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150902 - https://www.ibm.com/support/docview.wss?uid=ibm10738249 - http://www.securitytracker.com/id/1042031 - https://security.netapp.com/a
.ibm.com/support/docview.wss?uid=ibm10738249 - http://www.securitytracker.com/id/1042031 - https://security.netapp.com/advisory/ntap-20190401-0003/ - https://security.netapp.com/advisory/ntap-20190329-0003/
CVE ID: CVE-2018-1843 State: PUBLISHED Published: 2018-11-21T15:00:00Z Last Updated: 2024-09-16T18:04:24.106Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. It could be possible for an attacker with access to network traffic to sniff packets from the connection and uncover data. IBM X-Force ID: 150903 Additional Analyst Notes: - CVE Program Container: References: - http://www.
on and uncover data. IBM X-Force ID: 150903 Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10739845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150903
CVE ID: CVE-2018-1844 State: PUBLISHED Published: 2018-10-12T12:00:00Z Last Updated: 2024-09-17T01:31:04.535Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: FileNet Content Manager Problem Types: Obtain Information Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150904. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150904 - https://www.ibm.
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150904 - https://www.ibm.com/support/docview.wss?uid=ibm10732755
CVE ID: CVE-2018-1845 State: PUBLISHED Published: 2019-06-17T15:10:22.700624Z Last Updated: 2024-09-17T04:04:05.975Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/C:H/AC:L/S:U/I:N/UI:N/PR:L/A:L/RC:C/RL:O/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150905. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm1073891
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10738917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150905
CVE ID: CVE-2018-1846 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T20:17:42.541Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150945. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/supp
ources. IBM X-Force ID: 150945. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10738075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150945
CVE ID: CVE-2018-1847 State: PUBLISHED Published: 2019-09-18T15:10:12.000330Z Last Updated: 2024-09-16T18:24:56.134Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AC:L/AV:N/I:N/PR:L/S:C/UI:N/A:N/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Financial Transaction Manager Problem Types: Obtain Information Description: IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 through 3.0.0.8 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 150946. Ad
fted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 150946. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/security-bulletin-path-traversal-exposure-saveexport-function-ftm-oac - https://exchange.xforce.ibmcloud.com/vulnerabilities/150946
CVE ID: CVE-2018-1848 State: PUBLISHED Published: 2018-12-14T15:30:00Z Last Updated: 2024-09-16T23:41:48.896Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150947. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.i