Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38999 State: PUBLISHED Published: 2021-11-30T16:45:18.129251Z Last Updated: 2024-09-17T02:56:42.975Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/UI:N/S:U/PR:N/AC:H/AV:L/C:H/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Obtain Information Description: IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6519418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213214
CVE ID: CVE-2021-39000 State: PUBLISHED Published: 2021-11-30T16:45:19.481134Z Last Updated: 2024-09-16T16:13:28.214Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/PR:N/AV:N/C:H/I:N/UI:N/A:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: MQ Appliance Problem Types: Obtain Information Description: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6519422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213215
CVE ID: CVE-2021-39002 State: PUBLISHED Published: 2021-12-09T17:00:32.094581Z Last Updated: 2024-09-16T20:13:31.618Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/UI:N/S:U/AV:N/PR:N/C:H/AC:H/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213217
erences: - https://www.ibm.com/support/pages/node/6523802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213217 - https://security.netapp.com/advisory/ntap-20220114-0002/
CVE ID: CVE-2021-39006 State: PUBLISHED Published: 2022-06-21T16:00:18.209424Z Last Updated: 2024-09-16T22:46:38.542Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/S:U/A:N/C:L/I:N/AV:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: Obtain Information Description: IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213549
CVE ID: CVE-2021-39008 State: PUBLISHED Published: 2023-11-23T22:54:52.377Z Last Updated: 2024-08-04T01:58:16.500Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: CWE-200 Description: IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7081403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213551
CVE ID: CVE-2021-39009 State: PUBLISHED Published: 2022-09-01T19:00:27.281805Z Last Updated: 2024-09-17T04:10:04.107Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:H/AV:L/AC:L/I:N/S:U/A:N/UI:N/PR:H/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 213554. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213554 - https://security.netapp.com/advisory/ntap-20221014-0005/
CVE ID: CVE-2021-39011 State: PUBLISHED Published: 2023-01-20T18:08:10.000Z Last Updated: 2025-04-02T13:33:44.712Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cloud Pak for Security Problem Types: CWE-532 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 stores potentially sensitive information in log files that could be read by a privileged user. IBM X-Force ID: 213645. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6856403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213645
CVE ID: CVE-2021-39013 State: PUBLISHED Published: 2021-12-22T16:50:09.950208Z Last Updated: 2024-09-17T00:22:03.701Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AV:N/A:N/UI:N/AC:L/PR:L/I:N/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the system. IBM X-Force ID: 213651. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6529200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21365
eferences: - https://www.ibm.com/support/pages/node/6529200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213651
CVE ID: CVE-2021-39014 State: PUBLISHED Published: 2023-07-07T18:12:52.405Z Last Updated: 2024-10-24T14:25:19.484Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cloud Object Storage System Problem Types: CWE-79 Description: IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213650. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6517124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213650
CVE ID: CVE-2021-39015 State: PUBLISHED Published: 2022-07-14T16:15:23.479925Z Last Updated: 2024-09-16T19:14:23.938Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/PR:L/C:L/AC:L/S:C/A:N/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Cross-Site Scripting Description: IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213655. Additional Analyst Notes: - CVE Program Contai
credentials disclosure within a trusted session. IBM X-Force ID: 213655. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213655
CVE ID: CVE-2021-39016 State: PUBLISHED Published: 2022-07-14T16:15:29.687563Z Last Updated: 2024-09-17T03:33:48.994Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/C:N/I:L/UI:N/S:U/AC:L/A:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Bypass Security Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
t actor. IBM X-Force ID: 213722. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213722
CVE ID: CVE-2021-39017 State: PUBLISHED Published: 2022-07-14T16:15:36.022957Z Last Updated: 2024-09-16T17:58:08.026Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/I:H/C:N/PR:L/UI:R/A:N/AV:N/S:U/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Gain Access Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213725
CVE ID: CVE-2021-39018 State: PUBLISHED Published: 2022-07-14T16:15:41.676276Z Last Updated: 2024-09-16T23:52:07.594Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/C:L/I:N/UI:N/S:U/AC:L/AV:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Obtain Information Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603345 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6603345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213726
CVE ID: CVE-2021-39019 State: PUBLISHED Published: 2022-07-14T16:15:47.741518Z Last Updated: 2024-09-17T00:06:28.385Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AV:N/AC:L/S:U/C:H/PR:L/I:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Obtain Information Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user. IBM X-Force ID: 213728. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6603355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213728
CVE ID: CVE-2021-39020 State: PUBLISHED Published: 2022-05-05T16:00:24.083086Z Last Updated: 2024-09-17T01:21:12.309Z Severity: LOW (CVSS 2 CVSS:3.0/C:L/PR:H/UI:R/AV:N/S:U/A:N/AC:H/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6579773 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6579773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213855
CVE ID: CVE-2021-39021 State: PUBLISHED Published: 2022-02-04T22:32:04.308040Z Last Updated: 2024-09-16T20:06:39.978Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/PR:N/I:N/C:L/AC:H/AV:N/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6552552 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/6552552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213856
CVE ID: CVE-2021-39022 State: PUBLISHED Published: 2022-03-10T19:50:23.915239Z Last Updated: 2024-09-16T22:14:16.894Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/I:L/AC:H/UI:R/S:C/C:H/PR:H/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Gain Access Description: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/su
oftware. IBM X-Force ID: 213858. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213858
CVE ID: CVE-2021-39023 State: PUBLISHED Published: 2022-05-06T15:55:17.279586Z Last Updated: 2024-09-17T03:42:47.992Z Severity: LOW (CVSS 2.7 CVSS:3.0/AC:L/UI:N/AV:N/C:L/I:N/S:U/PR:H/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6582473 - https://exchan
al Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6582473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213860
CVE ID: CVE-2021-39024 State: PUBLISHED Published: 2022-05-10T15:45:18.595762Z Last Updated: 2024-09-17T03:23:34.097Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AC:L/AV:N/S:C/I:L/PR:H/C:L/UI:R/A:N/RL:O/RC:C/E:H) Vendors: IBM Products: Guardium Data Encryption Problem Types: Cross-Site Scripting Description: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/s
session. IBM X-Force ID: 213862. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6584143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213862
CVE ID: CVE-2021-39025 State: PUBLISHED Published: 2022-03-10T19:50:25.674571Z Last Updated: 2024-09-17T00:10:40.683Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/I:N/AC:L/UI:N/S:U/C:L/PR:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213863
CVE ID: CVE-2021-39026 State: PUBLISHED Published: 2022-02-18T17:35:18.692845Z Last Updated: 2024-09-17T02:00:55.423Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/S:U/PR:N/UI:N/I:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 213964. Additional Analyst Notes: - CVE Program Container: References:
ng man in the middle techniques. IBM X-Force ID: 213964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6557184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213864
CVE ID: CVE-2021-39027 State: PUBLISHED Published: 2022-05-06T15:55:18.825170Z Last Updated: 2024-09-17T02:15:42.508Z Severity: LOW (CVSS 3 CVSS:3.0/C:N/S:C/I:L/AC:H/UI:R/AV:N/A:N/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Guardium Data Encryption Problem Types: Bypass Security Description: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6582499 - ht
65. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6582499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213865
CVE ID: CVE-2021-39028 State: PUBLISHED Published: 2022-07-14T16:15:53.571731Z Last Updated: 2024-09-17T01:01:55.483Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/PR:L/I:L/UI:N/A:N/AV:N/S:U/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: Gain Access Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866. Additional Anal
le system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213866
CVE ID: CVE-2021-39031 State: PUBLISHED Published: 2022-01-25T16:25:11.469553Z Last Updated: 2024-09-16T18:28:32.173Z Severity: HIGH (CVSS 7.5 CVSS:3.0/C:H/I:H/AC:H/S:U/AV:N/PR:L/A:H/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Gain Privileges Description: IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 213875. Additional Analyst Notes: - CVE Program Container: References: - https://
nauthorized resources. IBM X-Force ID: 213875. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6550488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213875
CVE ID: CVE-2021-39032 State: PUBLISHED Published: 2022-01-14T17:10:12.893176Z Last Updated: 2024-09-16T22:46:46.004Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/C:L/UI:N/AC:L/I:N/AV:L/A:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling Gentran:Server for Microsoft Windows Problem Types: Obtain Information Description: IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6540668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213962
CVE ID: CVE-2021-39033 State: PUBLISHED Published: 2022-04-19T16:15:18.842500Z Last Updated: 2024-09-16T23:31:47.546Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/PR:L/S:U/I:N/A:N/C:L/AC:L/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213963. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm
nst the system. IBM X-Force ID: 213963. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6573049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213963
CVE ID: CVE-2021-39034 State: PUBLISHED Published: 2022-02-17T16:30:11.043240Z Last Updated: 2024-09-16T17:14:09.555Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/C:N/AC:H/PR:L/I:N/A:H/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6556466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213964
CVE ID: CVE-2021-39035 State: PUBLISHED Published: 2022-08-16T18:45:18.777427Z Last Updated: 2024-09-16T18:38:26.744Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AV:N/S:C/PR:L/I:L/A:N/UI:R/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213965. Additional Analyst
lity potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6612499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213965
CVE ID: CVE-2021-39036 State: PUBLISHED Published: 2023-05-12T00:49:10.920Z Last Updated: 2025-02-13T16:28:28.035Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213966. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/6986505
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/6986505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213966 - https://security.netapp.com/advisory/ntap-20230622-0003/
CVE ID: CVE-2021-39038 State: PUBLISHED Published: 2022-02-24T17:10:13.061239Z Last Updated: 2024-09-16T20:03:01.125Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:N/C:L/S:C/UI:R/I:L/PR:L/AC:H/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Liberty, WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agai
attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 213968. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6559044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213968