Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4465 State: PUBLISHED Published: 2020-07-28T12:05:27.638914Z Last Updated: 2024-09-16T23:56:15.178Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/PR:L/AC:H/C:N/A:H/AV:N/UI:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252783 -
1562. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181562
CVE ID: CVE-2020-4466 State: PUBLISHED Published: 2020-07-20T14:05:24.605425Z Last Updated: 2024-09-16T20:13:28.620Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/C:N/UI:N/AV:N/AC:L/A:H/PR:L/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: MQ for HPE NonStop Problem Types: Denial of Service Description: IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within the Queue processing function. IBM X-Force ID: 181563. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6250473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181563
CVE ID: CVE-2020-4467 State: PUBLISHED Published: 2020-05-14T15:50:46.435824Z Last Updated: 2024-09-17T00:37:18.280Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/UI:R/S:U/PR:N/C:H/A:H/AC:L/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181721. Additional Analyst Notes: -
with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181721. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181721
CVE ID: CVE-2020-4468 State: PUBLISHED Published: 2020-05-14T15:50:46.885859Z Last Updated: 2024-09-16T18:29:30.112Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/AC:L/A:H/C:H/PR:N/UI:R/S:U/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: i2 Analysts Notebook Problem Types: Gain Access Description: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181723. Additional Analyst Notes: -
with the privileges of the victim or cause the application to crash. IBM X-Force ID: 181723. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181723
CVE ID: CVE-2020-4469 State: PUBLISHED Published: 2020-06-15T13:25:25.847796Z Last Updated: 2024-09-16T18:19:46.265Z Severity: HIGH (CVSS 8.1 CVSS:3.0/A:H/I:H/UI:N/S:U/PR:N/AC:H/C:H/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724. Additional Analyst Notes: - CVE Program Container: References: - https:/
fix for CVE-2020-4211. IBM X-Force ID: 181724. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181724 - https://www.tenable.com/security/research/tra-2020-37
CVE ID: CVE-2020-4470 State: PUBLISHED Published: 2020-06-15T13:25:26.303000Z Last Updated: 2024-09-16T22:29:51.377Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:H/I:H/UI:R/S:U/C:H/PR:L/AC:H/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181725 - https://ww
ttps://www.ibm.com/support/pages/node/6221358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181725 - https://www.tenable.com/security/research/tra-2020-37
CVE ID: CVE-2020-4471 State: PUBLISHED Published: 2020-06-15T13:25:26.806024Z Last Updated: 2024-09-17T03:55:06.866Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/PR:N/AC:H/C:N/UI:N/S:U/A:L/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Denial of Service Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181726 - ht
ces: - https://www.ibm.com/support/pages/node/6221358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181726 - https://www.tenable.com/security/research/tra-2020-37
CVE ID: CVE-2020-4475 State: PUBLISHED Published: 2020-11-16T16:40:33.069244Z Last Updated: 2024-09-17T04:29:24.756Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/PR:L/A:N/I:N/S:U/UI:N/AC:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6
st the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181777
CVE ID: CVE-2020-4476 State: PUBLISHED Published: 2020-11-16T16:40:33.515351Z Last Updated: 2024-09-17T02:41:59.957Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AC:L/UI:N/AV:N/C:L/A:N/PR:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181778. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/nod
Force ID: 181778. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181778
CVE ID: CVE-2020-4477 State: PUBLISHED Published: 2020-06-15T13:25:27.269355Z Last Updated: 2024-09-16T17:33:22.344Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/UI:N/I:N/A:N/AV:N/C:H/AC:H/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181779
CVE ID: CVE-2020-4481 State: PUBLISHED Published: 2020-08-05T13:15:17.166320Z Last Updated: 2024-09-16T19:25:33.484Z Severity: HIGH (CVSS 8.2 CVSS:3.0/S:U/AC:L/A:L/UI:N/AV:N/PR:N/C:H/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: UrbanCode Deploy Problem Types: Informational Description: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181848. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6256128 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6256128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181848
CVE ID: CVE-2020-4482 State: PUBLISHED Published: 2020-11-06T13:40:18.669016Z Last Updated: 2024-09-16T16:48:01.359Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:N/AC:H/PR:L/I:H/A:N/S:U/UI:N/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: UrbanCode Deploy Problem Types: Bypass Security Description: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6337603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6337603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181856
CVE ID: CVE-2020-4483 State: PUBLISHED Published: 2020-11-06T13:40:19.112204Z Last Updated: 2024-09-16T18:39:30.344Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/I:N/AC:L/C:L/AV:N/UI:N/S:U/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181857. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6360835 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6360835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181857
CVE ID: CVE-2020-4484 State: PUBLISHED Published: 2020-11-06T13:40:19.591974Z Last Updated: 2024-09-17T00:46:48.081Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/AV:N/A:N/S:U/I:N/PR:L/C:L/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticated user that could be used in further attacks against the system. IBM X-Force ID: 181858. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6337605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181858
CVE ID: CVE-2020-4485 State: PUBLISHED Published: 2020-08-11T12:05:16.139114Z Last Updated: 2024-09-16T22:35:28.004Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/I:N/A:H/AC:L/C:N/AV:N/UI:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar Wincollect Problem Types: Denial of Service Description: IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks. IBM X-Force ID: 181860. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6257885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181860
CVE ID: CVE-2020-4486 State: PUBLISHED Published: 2020-08-11T12:05:16.553676Z Last Updated: 2024-09-17T00:42:06.133Z Severity: HIGH (CVSS 8.1 CVSS:3.0/A:H/I:H/S:U/PR:L/UI:N/AV:N/C:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar Wincollect Problem Types: File Manipulation Description: IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Force ID: 181861. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6257885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181861
CVE ID: CVE-2020-4487 State: PUBLISHED Published: 2021-01-08T20:40:22.413554Z Last Updated: 2024-09-16T18:50:20.695Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/A:N/S:U/C:L/AC:L/UI:N/AV:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Engineering Lifecycle Optimization, Rational DOORS Next Generation, Rational Rhapsody Model Manager, Rational Rhapsody Design Manager, Rational Team Concert, Engineering Workflow Management, Rational Collaborative Lifecycle Management, Engineering Test Management, Rational Engineering Lifecycle Manager, Rational Quality Manager Problem Types: Obtain Information Description: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when
nformation Description: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181862
CVE ID: CVE-2020-4490 State: PUBLISHED Published: 2020-05-29T13:10:20.704929Z Last Updated: 2024-09-17T03:38:56.064Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:R/S:U/AV:N/PR:N/A:N/AC:H/I:H/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: Business Process Manager Advanced, Business Automation Workflow Problem Types: Bypass Security Description: IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989 Additional Analyst Notes: - CVE Program Container: Reference
edirect a vitcim to a phishing site. IBM X-Force ID: 181989 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6217550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181989
CVE ID: CVE-2020-4491 State: PUBLISHED Published: 2020-10-20T14:15:32.316933Z Last Updated: 2024-09-17T00:46:13.362Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/S:U/UI:N/PR:N/AV:L/AC:L/A:L/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon which would cause the service to crash. IBM X-Force ID: 181991. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349465 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6349465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181991
CVE ID: CVE-2020-4492 State: PUBLISHED Published: 2020-08-31T12:55:14.240641Z Last Updated: 2024-09-16T23:11:18.566Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/C:N/UI:N/AC:L/A:H/PR:N/S:U/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments. IBM X-Force ID: 181992. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6324249 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6324249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181992
CVE ID: CVE-2020-4493 State: PUBLISHED Published: 2020-10-05T13:25:14.828378Z Last Updated: 2024-09-17T02:10:47.760Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/PR:N/AC:L/A:H/S:U/UI:N/I:H/C:H/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Bypass Security Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM X-Force ID: 181995. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6340281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/181995
CVE ID: CVE-2020-4494 State: PUBLISHED Published: 2020-06-15T13:25:27.712455Z Last Updated: 2024-09-17T02:41:34.476Z Severity: HIGH (CVSS 7.5 CVSS:3.0/I:N/A:N/S:U/UI:N/C:H/AC:L/PR:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect for Space Management (Linux), Spectrum Protect for Space Management (AIX), Spectrum Protect Client (AIX), Spectrum Protect Client (Linux and Windows) Problem Types: Obtain Information Description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to byp
gement 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
CVE ID: CVE-2020-4495 State: PUBLISHED Published: 2021-06-02T20:40:37.009991Z Last Updated: 2024-09-16T17:27:38.760Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/PR:L/I:H/AC:L/A:H/UI:N/S:U/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Engineering Test Management, Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation Problem Types: Bypass Security Description: IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to th
ttacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182114
CVE ID: CVE-2020-4496 State: PUBLISHED Published: 2021-12-13T18:35:29.007072Z Last Updated: 2024-09-16T16:22:56.865Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/C:H/I:N/UI:N/AV:N/AC:H/S:C/PR:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6525346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182046
CVE ID: CVE-2020-4497 State: PUBLISHED Published: 2022-12-14T21:50:35.313Z Last Updated: 2025-04-17T20:06:39.906Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Spectrum Protect Plus Problem Types: CWE-319 Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847627 - h
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182106
CVE ID: CVE-2020-4498 State: PUBLISHED Published: 2020-07-27T13:31:24.867712Z Last Updated: 2024-09-17T03:33:36.082Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AC:H/AV:L/A:N/S:U/UI:N/PR:H/I:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Obtain Information Description: IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182118
CVE ID: CVE-2020-4499 State: PUBLISHED Published: 2020-10-15T12:40:21.263570Z Last Updated: 2024-09-17T04:28:43.932Z Severity: HIGH (CVSS 7.3 CVSS:3.0/I:L/UI:N/AC:L/PR:N/AV:N/C:L/S:U/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access, Security Access Manager Problem Types: Bypass Security Description: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6348046 - https://exchange.xforce.ibmcloud.com/vuln
gram Container: References: - https://www.ibm.com/support/pages/node/6348046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182216
CVE ID: CVE-2020-4503 State: PUBLISHED Published: 2020-06-02T13:45:23.847726Z Last Updated: 2024-09-16T22:50:28.037Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/AC:L/PR:N/S:C/AV:N/A:N/UI:R/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62144
D: 182283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182283