Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32665 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T15:57:02.389Z Vendors: MediaTek, Inc. Products: EN7528, EN7580 Problem Types: Elevation of Privilege Description: In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2023
CVE ID: CVE-2022-32666 State: PUBLISHED Published: 2023-07-04T01:44:59.030Z Last Updated: 2024-12-04T16:26:54.136Z Vendors: MediaTek, Inc. Products: MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8365 Problem Types: Denial of Service Description: In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2023
CVE ID: CVE-2022-32667 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32668 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32669 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32670 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32671 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32672 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32673 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32674 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32675 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32676 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32677 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32678 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32679 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32680 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32681 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32682 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32683 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32684 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32685 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32686 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32687 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32688 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32689 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32690 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32691 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32692 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32693 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32694 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32695 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32696 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32697 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32698 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32699 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32700 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32701 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32702 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32703 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32704 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32705 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32706 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32707 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32708 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32709 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32710 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32711 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32712 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32713 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32714 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32715 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32716 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32717 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32718 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32719 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32720 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32721 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32722 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32723 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32724 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32725 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32726 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32727 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32728 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32729 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32730 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32731 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32732 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32733 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32734 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32735 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32736 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32737 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32738 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2022-32739 State: PUBLISHED Published: 2022-06-13T08:00:33.252564Z Last Updated: 2024-09-17T02:47:17.842Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRS, OTRSCalendarResourcePlanning Problem Types: CWE-200 Description: When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-07/
CVE ID: CVE-2022-32740 State: PUBLISHED Published: 2022-06-13T08:00:48.928529Z Last Updated: 2024-09-16T19:09:59.946Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-200 Description: A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-08/
CVE ID: CVE-2022-32741 State: PUBLISHED Published: 2022-06-13T08:01:04.282221Z Last Updated: 2024-09-16T16:43:46.120Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-200 Description: Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2022-09/
CVE ID: CVE-2022-32742 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-03T07:46:44.972Z Vendors: n/a Products: samba Problem Types: CWE-200 Description: A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2022-32742.html - https://security.gentoo.org/gls
gram Container: References: - https://www.samba.org/samba/security/CVE-2022-32742.html - https://security.gentoo.org/glsa/202309-06 - https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
CVE ID: CVE-2022-32743 State: PUBLISHED Published: 2022-09-01T00:00:00 Last Updated: 2024-08-03T07:46:44.980Z Vendors: n/a Products: samba Problem Types: CWE-276 Description: Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.samba.org/show_bug.cgi?id=14833 - https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/5c578b15-d619-408d-ba17-380714b89fd1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/ - https://security.gentoo.org/g
ist/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/ - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2022-32744 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-03T07:46:44.953Z Vendors: n/a Products: samba Problem Types: CWE-290 Description: A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2022-32744.html - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2022-32745 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-03T07:46:45.260Z Vendors: n/a Products: samba Problem Types: CWE-125 Description: A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2022-32745.html - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2022-32746 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-03T07:46:45.265Z Vendors: n/a Products: samba Problem Types: CWE-416 Description: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2022-32746.html - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2022-32747 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-02-05T20:07:31.318Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) Problem Types: CWE-290 Description: A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
(Versions prior to 2.2) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf
CVE ID: CVE-2022-32748 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-02-05T20:07:23.903Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) Problem Types: CWE-295 Description: A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (V
on tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf
CVE ID: CVE-2022-32749 State: PUBLISHED Published: 2022-12-19T10:51:57.466Z Last Updated: 2025-04-17T14:21:28.511Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02
CVE ID: CVE-2022-32750 State: PUBLISHED Published: 2022-07-31T16:07:48.901077Z Last Updated: 2024-09-16T16:23:00.448Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/UI:R/C:L/AV:N/I:L/AC:L/S:C/A:N/E:H/RL:O/RC:C) Vendors: IBM Products: DataPower Gateway Problem Types: Cross-Site Scripting Description: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228435. Additional Analyst Notes: -
entially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228435
CVE ID: CVE-2022-32751 State: PUBLISHED Published: 2024-03-22T15:31:02.795Z Last Updated: 2024-08-03T07:46:45.161Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Directory Problem Types: CWE-200 Description: IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system. IBM X-Force ID: 228437. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228437
CVE ID: CVE-2022-32752 State: PUBLISHED Published: 2023-06-15T02:57:58.511Z Last Updated: 2024-12-12T21:39:49.922Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Directory Suite VA Problem Types: CWE-78 Description: IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 228439. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228439
CVE ID: CVE-2022-32753 State: PUBLISHED Published: 2024-03-22T15:26:23.956Z Last Updated: 2024-08-03T07:46:44.926Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Directory Problem Types: CWE-326 Description: IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228444. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228444
CVE ID: CVE-2022-32754 State: PUBLISHED Published: 2024-03-22T15:33:43.097Z Last Updated: 2024-08-03T07:46:45.125Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Verify Directory Problem Types: CWE-79 Description: IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228445. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/71450
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228445
CVE ID: CVE-2022-32755 State: PUBLISHED Published: 2023-10-14T14:25:43.482Z Last Updated: 2024-09-17T16:23:59.115Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: IBM Products: Security Directory Server Problem Types: CWE-91 Description: IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047428 - https://exchange.xforce.ibmc
er: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228505
CVE ID: CVE-2022-32756 State: PUBLISHED Published: 2024-03-22T15:28:57.628Z Last Updated: 2024-08-03T07:46:45.264Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Directory Problem Types: CWE-209 Description: IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 228507. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145001 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228507