Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1549 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T00:21:57.685Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensi
ow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 142658. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10716607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142658
CVE ID: CVE-2018-1550 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-16T22:50:57.124Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/AC:L/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Denial of Service Description: IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142696 - http://www.ibm.com/support/docview.wss?uid=ibm10719401
CVE ID: CVE-2018-1551 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-16T20:21:49.392Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere MQ Problem Types: Gain Access Description: IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10716113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142888 - http://www.securityfocus.com/b
cview.wss?uid=ibm10716113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142888 - http://www.securityfocus.com/bid/105040
CVE ID: CVE-2018-1552 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T18:18:15.448Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Gain Access Description: IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID
a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142889 - http://www.ibm.com/support/docview.wss?uid=swg22016247
CVE ID: CVE-2018-1553 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T21:04:15.336Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: IBM WebSphere Application Server Liberty Problem Types: Obtain Information Description: IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. IBM X-Force ID: 142890. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142890 - http://www.i
: - http://www.securityfocus.com/bid/104585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142890 - http://www.ibm.com/support/docview.wss?uid=swg22016218
CVE ID: CVE-2018-1554 State: PUBLISHED Published: 2018-08-02T14:00:00Z Last Updated: 2024-09-16T19:19:18.429Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142891. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/
. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142891 - https://www.ibm.com/support/docview.wss?uid=ibm10713695 - http://www.securityfocus.com/bid/104959
CVE ID: CVE-2018-1555 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-16T23:56:49.917Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: FileNet P8 Platform Problem Types: Cross-Site Scripting Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142892. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=sw
: 142892. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142892 - http://www.securitytracker.com/id/1041225
CVE ID: CVE-2018-1556 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-16T19:05:43.544Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: FileNet P8 Platform Problem Types: Cross-Site Scripting Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=sw
: 142893. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015943 - http://www.securitytracker.com/id/1041225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142893
CVE ID: CVE-2018-1557 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T18:33:17.087Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142955. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 142955. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142955
CVE ID: CVE-2018-1558 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T23:52:14.833Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142956. Additional Analyst Notes: - CVE Program Co
g to credentials disclosure within a trusted session. IBM X-Force ID: 142956. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142956 - http://www.ibm.com/support/docview.wss?uid=ibm10732477
CVE ID: CVE-2018-1560 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T19:41:19.805Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142958. Additional Analyst Notes: - CVE Program Container: Re
tials disclosure within a trusted session. IBM X-Force ID: 142958. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142958
CVE ID: CVE-2018-1563 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-17T03:07:54.613Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142967. Additional Analyst Notes: - CVE Program Container: Referenc
disclosure within a trusted session. IBM X-Force ID: 142967. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10717031 - http://www.securityfocus.com/bid/104910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142967 - https://www.exploit-db.com/exploits/45190/
CVE ID: CVE-2018-1564 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-16T22:56:14.637Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10716747 - http://www.securityfocus.com/bid/104927 - https://exchange.xforce.ibmcloud.com/vulnerabilit
ocview.wss?uid=ibm10716747 - http://www.securityfocus.com/bid/104927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142968
CVE ID: CVE-2018-1565 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T02:31:12.378Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016143 - https://exchange.xforce.ibmcloud.com/vulnerabilities
erences: - http://www.ibm.com/support/docview.wss?uid=swg22016143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143022 - http://www.securitytracker.com/id/1040967
CVE ID: CVE-2018-1566 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T00:55:57.754Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary code due to a format string error. IBM X-Force ID: 143023. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104740 - http://www.ibm.com/support/docview.wss?uid=swg22016182 - https://exchange.xforce.ibmcloud.com/vulnerab
.com/bid/104740 - http://www.ibm.com/support/docview.wss?uid=swg22016182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143023 - http://www.securitytracker.com/id/1041229
CVE ID: CVE-2018-1567 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-16T22:03:17.135Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized object from untrusted sources. IBM X-Force ID: 143024. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143024 - https://www.ibm.com/support/docview.wss?uid=swg22016254 - http://w
exchange.xforce.ibmcloud.com/vulnerabilities/143024 - https://www.ibm.com/support/docview.wss?uid=swg22016254 - http://www.securitytracker.com/id/1041644
CVE ID: CVE-2018-1568 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-17T04:15:12.988Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143118 - http://www.ibm.com/support/docview.wss?uid=ibm10737023
CVE ID: CVE-2018-1571 State: PUBLISHED Published: 2018-09-11T12:00:00Z Last Updated: 2024-09-16T17:03:56.251Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 143121. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143121 - http://www.securityfocus.com/bid/1053
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143121 - http://www.securityfocus.com/bid/105333 - https://www-01.ibm.com/support/docview.wss?uid=ibm10729701
CVE ID: CVE-2018-1583 State: PUBLISHED Published: 2018-05-22T13:00:00Z Last Updated: 2024-09-16T16:18:04.831Z Vendors: IBM Products: StoredIQ Problem Types: Gain Privileges Description: IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to access and manipulate documents on StoredIQ managed data sources. IBM X-Force ID: 143331. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143331
CVE ID: CVE-2018-1584 State: PUBLISHED Published: 2018-11-28T17:00:00Z Last Updated: 2024-09-16T20:02:46.851Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/
. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143497 - https://www.ibm.com/support/docview.wss?uid=ibm10741821 - http://www.securityfocus.com/bid/106125
CVE ID: CVE-2018-1585 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-16T19:24:26.779Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Software Architect Design Manager, Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c
users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143498 - http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE ID: CVE-2018-1587 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-17T02:21:12.104Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Software Architect Design Manager, Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500. Ad
information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143500 - http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE ID: CVE-2018-1588 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T23:30:29.188Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143501. Additional Analyst Notes: - CVE Program Container: References: - htt
r consume memory resources. IBM X-Force ID: 143501. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143501 - https://www.ibm.com/support/docview.wss?uid=ibm10731511
CVE ID: CVE-2018-1593 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T22:34:52.145Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Multi-Cloud Data Encryption Problem Types: Data Manipulation Description: IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143568 - https://www-01.ibm.com/support/docview.wss?uid=swg22016681
CVE ID: CVE-2018-1595 State: PUBLISHED Published: 2018-08-01T17:00:00Z Last Updated: 2024-09-16T20:38:05.362Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Symphony Problem Types: Gain Access Description: IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input. IBM X-Force ID: 143622. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104956 - https://www.ibm.com/support/docview.wss?uid=isg3T1027819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143622
CVE ID: CVE-2018-1599 State: PUBLISHED Published: 2018-08-22T11:00:00Z Last Updated: 2024-09-16T23:11:48.874Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 143744. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.co
t the victim. IBM X-Force ID: 143744. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143744
CVE ID: CVE-2018-1600 State: PUBLISHED Published: 2018-06-04T17:00:00Z Last Updated: 2024-09-16T17:57:47.792Z Severity: HIGH (CVSS 8.6 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143745 - http://www.ibm.com/support/docview.wss?uid=swg22015754
CVE ID: CVE-2018-1601 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T22:09:47.473Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143791. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 143791. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143791 - http://www.ibm.com/support/docview.wss?uid=ibm10733078