Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6077 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilit
21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95730 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6078 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95762 -
ttp://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95762 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6079 State: PUBLISHED Published: 2014-10-03T01:00:00 Last Updated: 2024-08-06T12:03:02.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684466 - http://www.securityfocus.com/bid/70197 - http://www-01.ibm.com/suppor
w-01.ibm.com/support/docview.wss?uid=swg21684466 - http://www.securityfocus.com/bid/70197 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95763 - http://secunia.com/advisories/61294 - http://secunia.com/advisories/61278 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64910 - http://www-01.ibm.com/support/docview.wss?uid=swg21685244
CVE ID: CVE-2014-6080 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibmc
t/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95767
CVE ID: CVE-2014-6082 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (administration UI outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://secunia.com/advisories/61945 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg21691601 -
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg21691601 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95809
CVE ID: CVE-2014-6083 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95810 - http://www-01.ibm.com/support/docview.wss
uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95810 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6084 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to obtain sensitive information by sniffing the network during use of a weak SSL cipher. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibm
rt/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95811
CVE ID: CVE-2014-6086 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not ensure that HTTPS is used, which allows remote attackers to obtain sensitive information by sniffing the network during an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95813 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://
exchange.xforce.ibmcloud.com/vulnerabilities/95813 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6087 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to obtain sensitive information by sniffing the network during use of a weak algorithm in an SSL cipher suite. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95813 - http
//www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95813 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6088 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive information by sniffing the network during use of the null SSL cipher. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95860 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview
ulnerabilities/95860 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
CVE ID: CVE-2014-6089 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (disrupted system operations) by uploading a file to a protected area. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xf
om/support/docview.wss?uid=swg1IV67358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95860
CVE ID: CVE-2014-6090 State: PUBLISHED Published: 2015-04-27T01:00:00 Last Updated: 2024-08-06T12:03:02.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix10, and 6.0.5 before 6.0.5.6 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/suppo
that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697726
CVE ID: CVE-2014-6091 State: PUBLISHED Published: 2014-09-23T21:00:00 Last Updated: 2024-08-06T12:03:02.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management (SPM) 6.0.4 before 6.0.4.5 iFix7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95869 - http://www-01.ibm.com/support/docview.wss?uid=swg21684930
CVE ID: CVE-2014-6092 State: PUBLISHED Published: 2015-04-27T01:00:00 Last Updated: 2024-08-06T12:03:02.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to cause a denial of service (web-service outage) by making many login attempts with a valid caseworker account name. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697742
CVE ID: CVE-2014-6093 State: PUBLISHED Published: 2014-11-26T02:00:00 Last Updated: 2024-08-06T12:03:02.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21689849 - http://www.securitytracker.com/id/1031359 - http://secunia.com/advisories/59752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95921 - http://secunia.com/advis
p://secunia.com/advisories/59752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95921 - http://secunia.com/advisories/60912 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI24678
CVE ID: CVE-2014-6095 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - htt
p://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - http://secunia.com/advisories/62363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95943 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6096 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95944 - http://www-01.ibm.com/support/docview.wss?uid=
wg21689779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95944 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - http://secunia.com/advisories/62363 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6097 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T12:03:02.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95945 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04034 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03786
CVE ID: CVE-2014-6098 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext passwords via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - https://exchange.xforce.ibmcloud.c
iew.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95961 - http://secunia.com/advisories/62363 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6099 State: PUBLISHED Published: 2014-10-26T18:00:00 Last Updated: 2024-08-06T12:03:02.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=swg21685345 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96004 - http://www-01.ibm.com/support/docview.w
s?uid=swg1IT03936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96004 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03935
CVE ID: CVE-2014-6100 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:03:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96005 - http://www-01.ibm.com/support/docview.w
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96005 - http://www-01.ibm.com/support/docview.wss?uid=swg21686581 - http://secunia.com/advisories/61061
CVE ID: CVE-2014-6101 State: PUBLISHED Published: 2014-10-31T10:00:00 Last Updated: 2024-08-06T12:03:02.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manager (BPM) Advanced 7.5 through 8.5.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61804 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51211 - http://www-01.ibm.com/support/docview.wss?uid=swg21687967 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51507 - https://exchange.xforce.ibmclou
ocview.wss?uid=swg21687967 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96024
CVE ID: CVE-2014-6102 State: PUBLISHED Published: 2015-02-17T01:00:00 Last Updated: 2024-08-06T12:03:02.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Containe
ntegration access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21695597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96141
CVE ID: CVE-2014-6105 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96144 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/d
.com/vulnerabilities/96144 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - http://secunia.com/advisories/62363 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6106 State: PUBLISHED Published: 2017-09-18T15:00:00 Last Updated: 2024-08-06T12:03:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks, web cache poisoning, or other unspecified impacts via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73167 - https://www-01.ibm.com/support/docview.wss?uid=swg21698020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96145
CVE ID: CVE-2014-6107 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T12:03:02.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642 - http://www-01.ibm.com/support/docview.wss?uid=swg21689779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96150 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - h
tps://exchange.xforce.ibmcloud.com/vulnerabilities/96150 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496 - http://secunia.com/advisories/62363 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
CVE ID: CVE-2014-6108 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T12:03:02.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 might allow man-in-the-middle attackers to obtain sensitive information by leveraging an unencrypted connection for interfaces. IBM X-Force ID: 96172. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96172
CVE ID: CVE-2014-6109 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T12:03:02.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via vectors related to server side LDAP queries. IBM X-Force ID: 96173. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96173