Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6848881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240034
CVE ID: CVE-2022-43877 State: PUBLISHED Published: 2023-05-06T02:44:14.137Z Last Updated: 2025-01-29T15:56:12.827Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: UrbanCode Deploy Problem Types: 256 Plaintext Storage of a Password Description: IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6967351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240148
CVE ID: CVE-2022-43880 State: PUBLISHED Published: 2024-03-03T15:34:42.158Z Last Updated: 2025-04-16T16:03:16.830Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: CWE-400 Description: IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6980843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240151
CVE ID: CVE-2022-43883 State: PUBLISHED Published: 2022-12-19T20:47:46.352Z Last Updated: 2025-04-16T17:38:32.867Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: 117 Improper Output Neutralization for Logs Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/no
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6841801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240266
CVE ID: CVE-2022-43887 State: PUBLISHED Published: 2022-12-19T20:27:09.027Z Last Updated: 2025-04-17T13:54:45.867Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-532 Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6841801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24045
eferences: - https://www.ibm.com/support/pages/node/6841801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240450
CVE ID: CVE-2022-43889 State: PUBLISHED Published: 2023-10-17T01:56:04.573Z Last Updated: 2024-09-13T18:50:11.882Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-200 Description: IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240452. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240452
CVE ID: CVE-2022-43890 State: PUBLISHED Published: 2024-03-04T15:52:58.538Z Last Updated: 2025-04-16T16:02:33.722Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege On-Premises Problem Types: CWE-200 Description: IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240453. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7108660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240453
CVE ID: CVE-2022-43891 State: PUBLISHED Published: 2023-10-17T02:04:17.754Z Last Updated: 2024-09-13T18:06:17.597Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-209 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 240454. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xfo
Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240454
CVE ID: CVE-2022-43892 State: PUBLISHED Published: 2023-10-17T02:00:49.518Z Last Updated: 2024-09-13T18:06:34.596Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-295 Description: IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the system. IBM X-Force ID: 240455. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240455
CVE ID: CVE-2022-43893 State: PUBLISHED Published: 2023-10-17T01:58:45.560Z Last Updated: 2024-09-13T18:06:51.646Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-400 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IBM X-Force ID: 240634. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240534
CVE ID: CVE-2022-43900 State: PUBLISHED Published: 2022-12-01T18:00:27.526Z Last Updated: 2025-04-23T20:17:32.706Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: WebSphere Automation for IBM Cloud Pak for Watson AIOps Problem Types: CWE-287 Description: IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6842605 - https://exchange.xforce.ibmcloud.com/vulner
Vulnrichment: References: - https://www.ibm.com/support/pages/node/6842605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240827
CVE ID: CVE-2022-43901 State: PUBLISHED Published: 2022-12-01T18:09:20.923Z Last Updated: 2025-04-23T15:57:08.780Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: WebSphere Automation for Cloud Pak for Watson AIOps Problem Types: CWE-200 Description: IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
M X-Force ID: 240829. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6842605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240829
CVE ID: CVE-2022-43902 State: PUBLISHED Published: 2023-03-01T20:44:15.672Z Last Updated: 2025-03-06T19:07:04.617Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Problem Types: 703 Improper Check or Handling of Exceptional Conditions Description: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240832
CVE ID: CVE-2022-43903 State: PUBLISHED Published: 2023-09-04T23:49:45.984Z Last Updated: 2024-09-26T18:29:22.147Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-20 Description: IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force ID: 240894. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7030110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240894
CVE ID: CVE-2022-43904 State: PUBLISHED Published: 2023-08-27T23:08:35.729Z Last Updated: 2024-10-01T20:44:48.258Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Problem Types: CWE-307 Description: IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7028509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240895
CVE ID: CVE-2022-43906 State: PUBLISHED Published: 2023-10-04T13:50:52.970Z Last Updated: 2024-09-19T14:48:01.991Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Guardium Problem Types: 1275 Sensitive Cookie with Improper SameSite Attribute Description: IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7038019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240897
CVE ID: CVE-2022-43907 State: PUBLISHED Published: 2023-08-27T22:38:20.917Z Last Updated: 2024-10-01T20:42:14.887Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Problem Types: CWE-78 Description: IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240901
CVE ID: CVE-2022-43908 State: PUBLISHED Published: 2023-07-19T01:56:52.445Z Last Updated: 2024-10-21T15:04:11.677Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-20 Description: IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7007815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240903
CVE ID: CVE-2022-43909 State: PUBLISHED Published: 2023-08-27T22:40:04.053Z Last Updated: 2024-09-30T17:51:40.397Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Security Guardium Problem Types: CWE-79 Description: IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028511 - https://excha
Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240905
CVE ID: CVE-2022-43910 State: PUBLISHED Published: 2023-07-19T02:04:56.074Z Last Updated: 2024-10-25T17:40:47.152Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls. IBM X-Force ID: 240908. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7007815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/240908
CVE ID: CVE-2022-43914 State: PUBLISHED Published: 2023-04-07T13:26:55.076Z Last Updated: 2025-02-10T15:21:23.090Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: TRIRIGA Application Platform Problem Types: CWE-79 Description: IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/69
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6981597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241036
CVE ID: CVE-2022-43915 State: PUBLISHED Published: 2024-08-24T11:22:02.059Z Last Updated: 2024-09-21T09:51:18.418Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: CWE-732 Description: IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com
d to elevate their user privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241037
CVE ID: CVE-2022-43916 State: PUBLISHED Published: 2025-01-30T12:04:47.259Z Last Updated: 2025-02-18T19:00:47.236Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: CWE-923 Description: IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7181916
CVE ID: CVE-2022-43917 State: PUBLISHED Published: 2023-01-25T17:17:35.679Z Last Updated: 2025-03-31T14:31:44.761Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-327 Description: IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857007
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241045
CVE ID: CVE-2022-43919 State: PUBLISHED Published: 2023-05-05T14:24:44.592Z Last Updated: 2025-01-29T16:55:41.956Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Problem Types: CWE-20 Description: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6986559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241354
CVE ID: CVE-2022-43920 State: PUBLISHED Published: 2023-01-04T17:21:07.011Z Last Updated: 2025-04-10T13:55:59.298Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852465 - ht
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241362
CVE ID: CVE-2022-43922 State: PUBLISHED Published: 2023-02-01T17:32:29.171Z Last Updated: 2025-03-26T18:42:41.836Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: 328 Reversible One-Way Hash Description: IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857807 - https://exchange.xforce.ibmclo
: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241583
CVE ID: CVE-2022-43923 State: PUBLISHED Published: 2023-02-24T14:13:01.313Z Last Updated: 2025-03-11T15:41:31.081Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-532 Description: IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user. IBM X-Force ID: 241584. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6957654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241584
CVE ID: CVE-2022-43927 State: PUBLISHED Published: 2023-02-17T16:51:38.656Z Last Updated: 2025-03-18T15:44:00.204Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-200 Description: IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241671
CVE ID: CVE-2022-43928 State: PUBLISHED Published: 2023-04-07T13:37:22.306Z Last Updated: 2025-02-10T15:21:00.359Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Db2 Mirror for i Problem Types: 256 Plaintext Storage of a Password Description: The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by utilizing a Java string for processing. Since Java strings are immutable, their contents exist in memory until garbage collected. This means sensitive data could be visible in memory over an indefinite amount of time. IBM has addressed this issue by reducing the amount of time the sensitiv
le in memory over an indefinite amount of time. IBM has addressed this issue by reducing the amount of time the sensitive data is visible in memory. IBM X-Force ID: 241675. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6981113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241675
CVE ID: CVE-2022-43929 State: PUBLISHED Published: 2023-02-17T16:57:22.781Z Last Updated: 2025-03-17T18:23:51.701Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241676
CVE ID: CVE-2022-43930 State: PUBLISHED Published: 2023-02-17T17:04:18.736Z Last Updated: 2025-03-12T20:06:59.641Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-200 Description: IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IBM X-Force ID: 241677. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/241677
CVE ID: CVE-2022-43931 State: PUBLISHED Published: 2023-01-03T03:11:03.979Z Last Updated: 2025-04-10T14:37:49.685Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: VPN Plus Server Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_22_26