Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4692 State: PUBLISHED Published: 2020-11-16T16:40:36.811375Z Last Updated: 2024-09-16T18:49:38.735Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/I:N/A:N/PR:L/UI:N/AC:L/S:U/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6368009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186780
CVE ID: CVE-2020-4693 State: PUBLISHED Published: 2020-09-02T18:25:25.686564Z Last Updated: 2024-09-17T03:07:44.052Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Gain Access Description: IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6325341 - https://exchange.xforce.ibmcloud.com/vulnerabili
ntainer: References: - https://www.ibm.com/support/pages/node/6325341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186782
CVE ID: CVE-2020-4695 State: PUBLISHED Published: 2021-03-08T18:00:24.838070Z Last Updated: 2024-09-16T16:44:06.700Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/UI:N/PR:N/I:N/AV:N/S:U/A:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6426707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186788
CVE ID: CVE-2020-4696 State: PUBLISHED Published: 2020-11-30T15:30:30.678492Z Last Updated: 2024-09-16T16:48:14.608Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/UI:N/S:U/C:L/AV:N/PR:N/I:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/186789 - https://www.ibm.com/support/pages/node/6372528
CVE ID: CVE-2020-4697 State: PUBLISHED Published: 2021-01-08T20:40:24.603243Z Last Updated: 2024-09-17T03:34:13.410Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/I:L/C:L/AC:L/UI:R/A:N/S:C/PR:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Team Concert, Rational Rhapsody Design Manager, Rational Rhapsody Model Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Quality Manager, Engineering Test Management, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186790
CVE ID: CVE-2020-4698 State: PUBLISHED Published: 2020-09-08T14:30:24.573487Z Last Updated: 2024-09-17T00:42:27.615Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AC:L/S:C/C:L/AV:N/PR:L/A:N/UI:N/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186841. Addition
d functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186841. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6326825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186841
CVE ID: CVE-2020-4699 State: PUBLISHED Published: 2020-10-12T13:05:35.713281Z Last Updated: 2024-09-16T20:16:56.855Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/I:N/C:H/S:U/UI:N/PR:N/A:N/AV:A/E:U/RL:O/RC:C) Vendors: IBM Products: Security Access Manager, Security Verify Access Problem Types: Obtain Information Description: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/6346619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/186947
CVE ID: CVE-2020-4700 State: PUBLISHED Published: 2020-11-16T16:40:37.240025Z Last Updated: 2024-09-16T18:29:13.906Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:H/PR:L/A:H/C:H/AV:N/AC:H/UI:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Privileges Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367979 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6367979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187077
CVE ID: CVE-2020-4701 State: PUBLISHED Published: 2020-11-19T15:15:18.821399Z Last Updated: 2024-09-16T22:10:34.278Z Severity: HIGH (CVSS 8.4 CVSS:3.0/UI:N/PR:N/AC:L/I:H/A:H/S:U/AV:L/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370025 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187078
CVE ID: CVE-2020-4702 State: PUBLISHED Published: 2020-09-04T13:35:17.875667Z Last Updated: 2024-09-16T20:42:40.058Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/A:N/AC:L/C:L/I:L/PR:L/AV:N/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 187187. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187187
CVE ID: CVE-2020-4703 State: PUBLISHED Published: 2020-09-15T13:50:25.453834Z Last Updated: 2024-09-16T16:28:05.214Z Severity: HIGH (CVSS 8 CVSS:3.0/PR:L/C:H/UI:R/I:H/AV:N/S:U/AC:L/A:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. This vulnerability is due to an incomplete fix for CVE-2020-4470. IBM X-Force ID: 187188. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6328867 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6328867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187188
CVE ID: CVE-2020-4704 State: PUBLISHED Published: 2020-11-10T14:50:27.294607Z Last Updated: 2024-09-16T18:38:53.295Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/AC:L/I:L/AV:N/PR:L/UI:N/C:L/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187189. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6365327 -
7189. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6365327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187189
CVE ID: CVE-2020-4705 State: PUBLISHED Published: 2020-11-16T16:40:37.669188Z Last Updated: 2024-09-16T17:08:24.700Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/UI:R/S:C/I:L/A:N/PR:H/C:L/RC:C/E:H/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187190. Additional Analyst Notes: - CVE Program Contai
credentials disclosure within a trusted session. IBM X-Force ID: 187190. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6368013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187190
CVE ID: CVE-2020-4706 State: PUBLISHED Published: 2021-08-17T13:55:12.216858Z Last Updated: 2024-09-16T20:43:10.370Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:U/UI:N/A:N/AV:N/AC:L/C:L/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking
duct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 187194. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6481879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187194
CVE ID: CVE-2020-4707 State: PUBLISHED Published: 2021-08-04T14:00:15.467088Z Last Updated: 2024-09-16T18:24:49.003Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AV:N/AC:L/C:L/I:L/A:N/S:C/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: API Connect Problem Types: Cross-Site Scripting Description: IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187370. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6477840 -
7370. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6477840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187370
CVE ID: CVE-2020-4708 State: PUBLISHED Published: 2020-09-16T15:55:14.860150Z Last Updated: 2024-09-16T19:26:05.802Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/S:U/AV:N/A:N/I:N/PR:N/C:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Trusteer Pinpoint Detect Problem Types: Obtain Information Description: IBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a wildcard in the Access-Control-Allow-Origin header. IBM X-Force ID: 187371. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6333049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187371
CVE ID: CVE-2020-4711 State: PUBLISHED Published: 2020-09-15T13:50:25.884961Z Last Updated: 2024-09-17T01:16:07.413Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/S:U/AV:N/I:N/UI:N/C:H/PR:L/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 187501. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6328867 - https://exchange.
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6328867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187501
CVE ID: CVE-2020-4717 State: PUBLISHED Published: 2021-03-10T15:05:29.897522Z Last Updated: 2024-09-17T02:46:38.111Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/UI:N/I:H/A:N/PR:N/S:U/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: SPSS Modeler Problem Types: Obtain Information Description: A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation. IBM X-Force ID: 187727. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6427901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187727
CVE ID: CVE-2020-4718 State: PUBLISHED Published: 2020-11-19T15:15:19.249593Z Last Updated: 2024-09-17T04:28:56.640Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/A:N/S:C/AV:N/I:L/AC:L/C:L/UI:N/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187731. Additional Analyst Notes: - CVE Program Container: References: - https://www.ib
trusted session. IBM X-Force ID: 187731. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187731
CVE ID: CVE-2020-4719 State: PUBLISHED Published: 2021-03-02T16:55:18.430464Z Last Updated: 2024-09-16T21:04:24.351Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/UI:N/PR:H/I:H/AV:N/A:N/S:U/C:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud APM Problem Types: Bypass Security Description: The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417137 - https:
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187861
CVE ID: CVE-2020-4721 State: PUBLISHED Published: 2020-10-29T15:50:32.772171Z Last Updated: 2024-09-16T20:03:09.730Z Severity: HIGH (CVSS 7.8 CVSS:3.0/A:H/AC:L/UI:R/S:U/PR:N/I:H/AV:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187868. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 187868. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187868
CVE ID: CVE-2020-4722 State: PUBLISHED Published: 2020-10-29T15:50:33.238531Z Last Updated: 2024-09-16T16:28:10.389Z Severity: HIGH (CVSS 7.8 CVSS:3.0/C:H/AV:L/I:H/PR:N/S:U/UI:R/A:H/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187870. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 187870. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187870
CVE ID: CVE-2020-4723 State: PUBLISHED Published: 2020-10-29T15:50:33.653456Z Last Updated: 2024-09-17T01:46:42.452Z Severity: HIGH (CVSS 7.8 CVSS:3.0/PR:N/AC:L/A:H/UI:R/S:U/I:H/C:H/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187873. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 187873. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187873
CVE ID: CVE-2020-4724 State: PUBLISHED Published: 2020-10-29T15:50:34.071505Z Last Updated: 2024-09-16T17:27:43.332Z Severity: HIGH (CVSS 7.8 CVSS:3.0/PR:N/UI:R/AC:L/A:H/S:U/I:H/AV:L/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356497 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187874
CVE ID: CVE-2020-4725 State: PUBLISHED Published: 2021-03-02T16:55:19.095408Z Last Updated: 2024-09-17T00:55:46.310Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/I:L/AV:N/PR:L/S:U/A:N/AC:L/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud APM Problem Types: Data Manipulation Description: IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force ID: 187974. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187974
CVE ID: CVE-2020-4726 State: PUBLISHED Published: 2021-03-02T16:55:19.741626Z Last Updated: 2024-09-16T23:25:39.219Z Severity: MEDIUM (CVSS 4 CVSS:3.0/UI:N/AV:L/I:N/PR:N/S:U/A:N/AC:L/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud APM Problem Types: Obtain Information Description: The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6417137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187975
CVE ID: CVE-2020-4727 State: PUBLISHED Published: 2020-09-25T17:00:18.900840Z Last Updated: 2024-09-17T01:10:38.596Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/C:L/AC:L/AV:N/S:C/A:N/PR:N/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/187976
CVE ID: CVE-2020-4729 State: PUBLISHED Published: 2023-04-28T01:11:03.737Z Last Updated: 2025-01-30T20:44:41.326Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Safer Payments Problem Types: 399 Resource Management Errors Description: IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash. IBM X-Force ID: 188052. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
plication to crash. IBM X-Force ID: 188052. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188052