Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29799 State: PUBLISHED Published: 2022-07-18T17:00:31.822196Z Last Updated: 2024-09-16T17:37:56.077Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/I:N/AV:N/A:N/UI:N/S:U/PR:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Engineering Requirements Quality Assistant On-Premises Problem Types: Obtain Information Description: IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604005 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6604005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203738
CVE ID: CVE-2021-29800 State: PUBLISHED Published: 2021-09-23T16:05:32.170682Z Last Updated: 2024-09-16T18:03:17.403Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AC:L/PR:L/C:L/A:N/AV:N/I:L/UI:N/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ib
als disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203906
CVE ID: CVE-2021-29801 State: PUBLISHED Published: 2021-08-26T19:25:27.686749Z Last Updated: 2024-09-17T01:11:01.851Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/UI:N/I:H/AC:L/C:H/S:U/A:H/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: VIOS, AIX Problem Types: Gain Privileges Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM X-Force ID: 203977. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6483875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/203977
CVE ID: CVE-2021-29802 State: PUBLISHED Published: 2021-08-23T16:05:19.204494Z Last Updated: 2024-09-16T16:58:07.176Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/A:L/C:L/AC:H/I:L/UI:N/PR:N/AV:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Security Problem Types: Gain Privileges Description: IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6482689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204059
CVE ID: CVE-2021-29803 State: PUBLISHED Published: 2021-07-12T16:05:32.447335Z Last Updated: 2024-09-17T04:04:19.268Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/C:L/I:L/PR:L/A:N/UI:N/S:C/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 204164. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204164
CVE ID: CVE-2021-29804 State: PUBLISHED Published: 2021-07-12T16:05:34.039900Z Last Updated: 2024-09-16T21:07:36.609Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/I:L/PR:L/AV:N/C:L/S:C/UI:N/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204262. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 204262. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204262
CVE ID: CVE-2021-29805 State: PUBLISHED Published: 2021-07-12T16:05:35.587912Z Last Updated: 2024-09-16T20:51:38.251Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/S:C/UI:N/AC:L/AV:N/C:L/I:L/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204263. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 204263. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204263
CVE ID: CVE-2021-29806 State: PUBLISHED Published: 2021-09-20T16:45:41.671934Z Last Updated: 2024-09-17T02:37:20.359Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/AV:N/AC:L/I:L/UI:N/A:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204264. Additional Analyst Notes: - CVE Program Container: References:
losure within a trusted session. IBM X-Force ID: 204264. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204264
CVE ID: CVE-2021-29807 State: PUBLISHED Published: 2021-09-20T16:45:43.338164Z Last Updated: 2024-09-17T03:03:49.628Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/S:C/UI:N/A:N/AV:N/AC:L/I:L/C:L/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204265. Additional Analyst Notes: - CVE Program Container: References:
losure within a trusted session. IBM X-Force ID: 204265. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204265
CVE ID: CVE-2021-29808 State: PUBLISHED Published: 2021-09-20T16:45:44.979925Z Last Updated: 2024-09-16T16:28:33.943Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/I:L/C:L/PR:L/S:C/UI:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204269. Additional Analyst Notes: - CVE Program Container: References:
losure within a trusted session. IBM X-Force ID: 204269. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204269
CVE ID: CVE-2021-29809 State: PUBLISHED Published: 2021-09-20T16:45:46.615653Z Last Updated: 2024-09-16T18:49:19.557Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/A:N/S:C/C:L/PR:L/AC:L/AV:N/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204270. Additional Analyst Notes: - CVE Program Container: References:
losure within a trusted session. IBM X-Force ID: 204270. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204270
CVE ID: CVE-2021-29810 State: PUBLISHED Published: 2021-09-23T18:05:35.649978Z Last Updated: 2024-09-17T00:30:50.622Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/C:L/AC:L/UI:N/AV:N/S:C/A:N/PR:L/I:L/RL:O/RC:C/E:U) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204279. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204279. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204279
CVE ID: CVE-2021-29811 State: PUBLISHED Published: 2021-09-20T16:45:48.208941Z Last Updated: 2024-09-17T03:49:24.100Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/S:U/UI:N/A:N/AC:L/AV:N/I:N/C:H/PR:H/RC:U/RL:O/E:U) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Obtain Information Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204329
CVE ID: CVE-2021-29812 State: PUBLISHED Published: 2021-09-23T18:05:37.365858Z Last Updated: 2024-09-17T00:02:26.725Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/AC:L/C:L/A:N/PR:L/I:L/AV:N/S:C/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204330. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204330. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204330
CVE ID: CVE-2021-29813 State: PUBLISHED Published: 2021-09-23T18:05:38.962170Z Last Updated: 2024-09-17T02:51:30.811Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/S:C/AV:N/PR:L/A:N/I:L/C:L/AC:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204331. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204331. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204331
CVE ID: CVE-2021-29814 State: PUBLISHED Published: 2021-09-23T18:05:40.523277Z Last Updated: 2024-09-16T19:24:16.274Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/PR:L/A:N/I:L/AV:N/S:C/UI:N/C:L/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204334. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204334. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204334
CVE ID: CVE-2021-29815 State: PUBLISHED Published: 2021-09-23T18:05:42.128283Z Last Updated: 2024-09-16T20:06:46.196Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/S:C/AV:N/I:L/A:N/PR:L/C:L/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204340. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 204340. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204340
CVE ID: CVE-2021-29816 State: PUBLISHED Published: 2021-09-23T18:05:43.772303Z Last Updated: 2024-09-16T19:19:21.768Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/PR:N/I:L/AV:N/S:U/UI:R/AC:L/C:N/RC:C/E:U/RL:O) Vendors: IBM Products: Jazz for Service Management Problem Types: Gain Access Description: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491535 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204341
CVE ID: CVE-2021-29817 State: PUBLISHED Published: 2021-09-20T16:45:49.918843Z Last Updated: 2024-09-16T18:29:51.000Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/A:N/S:C/C:L/PR:L/AC:L/AV:N/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204343. Additional Analyst Notes: - CVE Program Container: References: - https
within a trusted session. IBM X-Force ID: 204343. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204343
CVE ID: CVE-2021-29818 State: PUBLISHED Published: 2021-09-20T16:45:51.511872Z Last Updated: 2024-09-16T19:56:38.359Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/S:C/PR:L/C:L/I:L/AV:N/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204345. Additional Analyst Notes: - CVE Program Container: References: - https
within a trusted session. IBM X-Force ID: 204345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204345
CVE ID: CVE-2021-29819 State: PUBLISHED Published: 2021-09-20T16:45:53.154613Z Last Updated: 2024-09-16T20:36:44.613Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/C:L/I:L/AV:N/AC:L/A:N/UI:R/S:C/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204346. Additional Analyst Notes: - CVE Program Container: References: - https
within a trusted session. IBM X-Force ID: 204346. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204346
CVE ID: CVE-2021-29820 State: PUBLISHED Published: 2021-09-20T16:45:54.858062Z Last Updated: 2024-09-16T23:51:18.204Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/AC:L/AV:N/I:L/UI:R/A:N/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204347. Additional Analyst Notes: - CVE Program Container: References: - https
within a trusted session. IBM X-Force ID: 204347. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204347
CVE ID: CVE-2021-29821 State: PUBLISHED Published: 2021-09-20T16:45:56.486763Z Last Updated: 2024-09-16T19:30:56.191Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/UI:R/A:N/AC:L/AV:N/I:L/C:L/PR:L/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204348. Additional Analyst Notes: - CVE Program Container: References: - https
within a trusted session. IBM X-Force ID: 204348. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6490747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204348
CVE ID: CVE-2021-29822 State: PUBLISHED Published: 2021-07-12T16:05:37.160824Z Last Updated: 2024-09-16T20:03:46.037Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/AV:N/C:L/AC:L/UI:R/S:C/A:N/RL:O/RC:C/E:H) Vendors: IBM Products: Tivoli Netcool/OMNIbus Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204349. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/64
e ID: 204349. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204349
CVE ID: CVE-2021-29823 State: PUBLISHED Published: 2022-09-01T19:00:26.421581Z Last Updated: 2024-09-16T23:00:38.737Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/AC:L/AV:N/C:N/PR:N/A:N/UI:R/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204465. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204465
erences: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204465 - https://security.netapp.com/advisory/ntap-20221014-0005/
CVE ID: CVE-2021-29824 State: PUBLISHED Published: 2022-04-22T16:30:31.057868Z Last Updated: 2024-09-17T02:01:11.764Z Severity: LOW (CVSS 3.1 CVSS:3.0/PR:L/AV:N/I:N/A:N/UI:N/C:L/S:U/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could have read access to to the 'Data Connections' page to which they don't have access. IBM X-Force ID: 204468. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204468 - https://s
https://www.ibm.com/support/pages/node/6570957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204468 - https://security.netapp.com/advisory/ntap-20220602-0003/
CVE ID: CVE-2021-29825 State: PUBLISHED Published: 2021-09-16T15:50:20.270592Z Last Updated: 2024-09-16T19:14:36.113Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/C:H/AV:N/PR:N/S:U/A:N/UI:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6489499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204470 - https://security.netapp.com/advisory/ntap-202110
6489499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/204470 - https://security.netapp.com/advisory/ntap-20211029-0005/
CVE ID: CVE-2021-29827 State: PUBLISHED Published: 2024-12-18T23:44:18.973Z Last Updated: 2024-12-19T16:39:00.402Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-1021 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/security-bu