Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4129 State: PUBLISHED Published: 2020-11-30T23:46:22 Last Updated: 2024-08-04T07:52:20.935Z Vendors: n/a Products: HCL Domino Problem Types: Lockout policy bypass Description: HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407
CVE ID: CVE-2020-4135 State: PUBLISHED Published: 2020-02-19T15:15:45.454213Z Last Updated: 2024-09-16T18:28:29.112Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/PR:N/AC:L/C:N/S:U/UI:N/AV:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2876307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1738
References: - https://www.ibm.com/support/pages/node/2876307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/173806 - https://security.netapp.com/advisory/ntap-20210108-0001/
CVE ID: CVE-2020-4138 State: PUBLISHED Published: 2022-07-11T17:05:12.862768Z Last Updated: 2024-09-16T18:39:31.304Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/S:U/AC:L/A:N/PR:N/UI:N/I:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security SiteProtector System Problem Types: Obtain Information Description: IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174049
CVE ID: CVE-2020-4140 State: PUBLISHED Published: 2021-11-12T15:20:19.203661Z Last Updated: 2024-09-17T01:41:58.704Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/AV:N/C:L/S:C/I:L/AC:L/PR:L/E:H/RC:C/RL:O) Vendors: IBM Products: Security SiteProtector System Problem Types: Cross-Site Scripting Description: IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 174052. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174052
CVE ID: CVE-2020-4146 State: PUBLISHED Published: 2021-11-12T15:20:20.714116Z Last Updated: 2024-09-16T22:01:31.092Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AV:N/UI:N/C:L/S:C/AC:H/I:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security SiteProtector System Problem Types: Obtain Information Description: IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6515056 - https://exchange.xforce.ibmcloud.com/v
Program Container: References: - https://www.ibm.com/support/pages/node/6515056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174129
CVE ID: CVE-2020-4150 State: PUBLISHED Published: 2022-07-11T17:05:17.208068Z Last Updated: 2024-09-16T19:46:42.221Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/C:H/UI:N/I:N/PR:N/A:N/AC:H/S:C/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security SiteProtector System Problem Types: Obtain Information Description: IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174142. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602547 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174142
CVE ID: CVE-2020-4151 State: PUBLISHED Published: 2020-04-14T15:10:11.351379Z Last Updated: 2024-09-17T02:37:10.870Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/I:H/AC:L/AV:N/C:N/S:U/A:N/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Data Manipulation Description: IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. IBM X-Force ID: 174201. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174201
CVE ID: CVE-2020-4152 State: PUBLISHED Published: 2021-11-08T16:50:26.091205Z Last Updated: 2024-09-16T23:10:44.096Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:N/PR:N/AV:N/I:N/C:H/A:N/AC:H/S:C/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar Network Security Problem Types: Obtain Information Description: IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communication channel that can be obtained using man in the middle techniques. IBM X-Force ID: 17467. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6514403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174267
CVE ID: CVE-2020-4153 State: PUBLISHED Published: 2021-11-08T16:50:27.630306Z Last Updated: 2024-09-16T17:03:07.125Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/AC:L/C:L/I:L/AV:N/PR:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: QRadar Network Security Problem Types: Cross-Site Scripting Description: IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174269. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 174269. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6514403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174269
CVE ID: CVE-2020-4157 State: PUBLISHED Published: 2022-07-12T17:35:18.668841Z Last Updated: 2024-09-17T03:27:34.905Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/C:H/AV:N/AC:H/I:N/PR:N/S:C/UI:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar Network Security Problem Types: Obtain Information Description: IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174337. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602931 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174337
CVE ID: CVE-2020-4159 State: PUBLISHED Published: 2022-07-12T17:35:20.309661Z Last Updated: 2024-09-16T20:47:21.254Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/AV:N/AC:L/I:N/PR:N/S:U/A:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar Network Security Problem Types: Obtain Information Description: IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to mount further attacks against the system. IBM X-Force ID: 174339. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174339
CVE ID: CVE-2020-4160 State: PUBLISHED Published: 2021-11-08T16:50:29.152846Z Last Updated: 2024-09-16T17:49:20.975Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/I:N/A:N/AC:H/S:U/PR:N/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar Network Security Problem Types: Obtain Information Description: IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174340. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/
echniques. IBM X-Force ID: 174340. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6514403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174340
CVE ID: CVE-2020-4161 State: PUBLISHED Published: 2020-02-19T15:15:45.862651Z Last Updated: 2024-09-16T16:57:54.511Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/PR:L/AC:L/C:N/UI:N/S:U/AV:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a denial of service due to incorrect handling of certain commands. IBM X-Force ID: 174341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2874621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174341
CVE ID: CVE-2020-4162 State: PUBLISHED Published: 2020-03-10T11:55:16.221350Z Last Updated: 2024-09-16T20:57:28.904Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/UI:R/S:C/A:N/PR:L/AC:L/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174342. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/supp
ssion. IBM X-Force ID: 174342. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5690451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174342
CVE ID: CVE-2020-4163 State: PUBLISHED Published: 2020-02-04T16:45:38.204336Z Last Updated: 2024-09-16T23:45:27.889Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/A:H/I:H/UI:N/C:H/PR:H/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288786 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/1288786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174397
CVE ID: CVE-2020-4164 State: PUBLISHED Published: 2020-04-08T14:05:44.017644Z Last Updated: 2024-09-16T17:37:49.210Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/A:N/AC:L/UI:N/I:N/PR:H/C:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6172605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174400
CVE ID: CVE-2020-4165 State: PUBLISHED Published: 2020-08-24T15:30:29.790423Z Last Updated: 2024-09-16T22:45:15.142Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/I:L/AC:L/UI:R/C:L/AV:N/S:C/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Gain Access Description: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 174401. Additional Analyst Notes: - CVE Program Container: References: - https:/
cks against the victim. IBM X-Force ID: 174401. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174401
CVE ID: CVE-2020-4166 State: PUBLISHED Published: 2020-08-27T12:40:31.259831Z Last Updated: 2024-09-17T00:16:02.480Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/PR:N/UI:N/AC:L/S:U/I:N/A:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 174402. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174402
CVE ID: CVE-2020-4167 State: PUBLISHED Published: 2020-08-27T12:40:31.738775Z Last Updated: 2024-09-17T01:06:12.209Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/PR:N/AC:L/AV:N/C:L/A:N/S:U/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Bypass Security Description: IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation mechanisms. IBM X-Force ID: 174403. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174403
CVE ID: CVE-2020-4169 State: PUBLISHED Published: 2020-08-27T12:40:32.228386Z Last Updated: 2024-09-16T18:02:56.081Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/S:U/C:H/A:N/AV:N/AC:H/UI:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174405. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174405
CVE ID: CVE-2020-4170 State: PUBLISHED Published: 2020-08-24T15:30:30.264766Z Last Updated: 2024-09-17T00:41:21.772Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:N/A:N/I:L/UI:R/AC:L/C:N/S:U/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Gain Access Description: IBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 174406. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174406
CVE ID: CVE-2020-4171 State: PUBLISHED Published: 2020-08-27T12:40:32.665629Z Last Updated: 2024-09-17T00:30:41.706Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/I:N/S:U/C:L/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174407
CVE ID: CVE-2020-4172 State: PUBLISHED Published: 2020-08-27T12:40:33.156804Z Last Updated: 2024-09-16T16:47:50.912Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/A:N/S:U/I:N/PR:N/UI:N/AC:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 174408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/v
Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174408
CVE ID: CVE-2020-4173 State: PUBLISHED Published: 2020-07-09T19:05:20.200734Z Last Updated: 2024-09-17T00:05:53.501Z Severity: LOW (CVSS 3.1 CVSS:3.0/PR:N/UI:R/C:L/A:N/AC:H/AV:N/I:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Guardium Activity Monitor Problem Types: Obtain Information Description: IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force I
ll be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 174682. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6244924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174682
CVE ID: CVE-2020-4174 State: PUBLISHED Published: 2020-08-27T12:40:12.675143Z Last Updated: 2024-09-17T04:25:20.494Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/I:N/AC:H/A:N/AV:N/UI:N/PR:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174683
CVE ID: CVE-2020-4175 State: PUBLISHED Published: 2020-08-27T12:40:33.582589Z Last Updated: 2024-09-17T02:01:35.307Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/I:N/C:H/A:N/AV:N/PR:N/UI:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/supp
iques. IBM X-Force ID: 174684. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174684
CVE ID: CVE-2020-4177 State: PUBLISHED Published: 2020-06-03T14:30:20.049145Z Last Updated: 2024-09-16T18:43:50.702Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/PR:N/C:H/UI:N/S:C/A:N/AV:N/I:N/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218970 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/6218970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174732
CVE ID: CVE-2020-4180 State: PUBLISHED Published: 2020-06-03T14:30:20.477540Z Last Updated: 2024-09-16T16:33:37.117Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/I:H/AV:N/S:U/A:H/UI:N/C:H/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 174735. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218960 - https://exchange.xforce.ibmcl
s: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174735
CVE ID: CVE-2020-4182 State: PUBLISHED Published: 2020-06-03T14:30:20.898480Z Last Updated: 2024-09-16T22:36:32.717Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/AV:N/A:N/S:C/AC:L/C:L/PR:N/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174738. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218964 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174738
CVE ID: CVE-2020-4183 State: PUBLISHED Published: 2020-06-04T13:35:17.910868Z Last Updated: 2024-09-16T17:27:57.277Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/AV:N/I:L/AC:L/S:C/PR:N/A:N/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174739. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220126 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174739
CVE ID: CVE-2020-4184 State: PUBLISHED Published: 2021-03-15T15:30:16.754408Z Last Updated: 2024-09-17T01:21:36.145Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/C:L/A:L/PR:N/I:L/UI:N/AC:H/S:C/AV:A/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802.. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6429569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/174802