Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22465 State: PUBLISHED Published: 2022-07-08T17:45:24.113826Z Last Updated: 2024-09-17T00:21:39.697Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:H/PR:L/A:N/C:H/I:H/S:U/UI:N/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Problem Types: Gain Privileges Description: IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Force ID: 225082. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225082
CVE ID: CVE-2022-22466 State: PUBLISHED Published: 2023-10-23T19:42:53.793Z Last Updated: 2024-09-11T14:41:51.016Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-798 Description: IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 225222. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057377 - https://exchange.xforce.
tainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225222
CVE ID: CVE-2022-22470 State: PUBLISHED Published: 2023-01-06T16:39:55.538Z Last Updated: 2025-04-10T13:20:02.191Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: 256 Plaintext Storage of a Password Description: IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225232
CVE ID: CVE-2022-22472 State: PUBLISHED Published: 2022-06-30T16:50:27.426534Z Last Updated: 2024-09-17T00:00:55.744Z Severity: MEDIUM (CVSS 6 CVSS:3.0/I:L/UI:N/A:L/C:L/AC:H/S:C/AV:N/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.10.2 for Red Hat OpenShift) could allow a remote attacker to bypass IBM Spectrum Protect Plus role based access control restrictions, caused by improper disclosure of session information. By retrieving the logs of a container an attacker could exploit this vulnerability to bypass login s
ession information. By retrieving the logs of a container an attacker could exploit this vulnerability to bypass login security of the IBM Spectrum Protect Plus server and gain unauthorized access based on the permissions of the IBM Spectrum Protect Plus user to the vulnerable Spectrum Protect Plus server software. IBM X-Force ID: 225340. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225340
CVE ID: CVE-2022-22473 State: PUBLISHED Published: 2022-07-14T16:25:16.001811Z Last Updated: 2024-09-16T16:28:56.687Z Severity: LOW (CVSS 3.7 CVSS:3.0/UI:N/I:N/A:N/AC:H/PR:N/S:U/AV:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603421 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225347
CVE ID: CVE-2022-22474 State: PUBLISHED Published: 2022-06-30T16:25:16.784364Z Last Updated: 2024-09-16T17:07:59.406Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:H/S:U/AV:N/UI:N/AC:H/C:N/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Client Problem Types: Denial of Service Description: IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596741 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6596741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225348
CVE ID: CVE-2022-22475 State: PUBLISHED Published: 2022-05-17T16:25:23.272726Z Last Updated: 2024-09-17T00:11:45.260Z Severity: MEDIUM (CVSS 5 CVSS:3.0/PR:L/C:L/AV:N/I:L/A:L/AC:H/UI:N/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Gain Privileges Description: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225603
CVE ID: CVE-2022-22476 State: PUBLISHED Published: 2022-07-08T17:45:25.568217Z Last Updated: 2024-09-16T20:21:17.276Z Severity: MEDIUM (CVSS 5 CVSS:3.0/C:L/PR:L/A:L/AC:H/AV:N/UI:N/S:U/I:L/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Gain Privileges Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6602015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225604
CVE ID: CVE-2022-22477 State: PUBLISHED Published: 2022-07-14T16:25:23.112797Z Last Updated: 2024-09-16T16:32:43.058Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/AV:N/S:C/PR:N/AC:L/A:N/I:L/UI:R/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 225605. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6603417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225605
CVE ID: CVE-2022-22478 State: PUBLISHED Published: 2022-06-30T16:25:21.094393Z Last Updated: 2024-09-16T20:32:09.329Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/I:N/PR:N/AV:L/AC:L/UI:N/S:U/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Client Problem Types: Obtain Information Description: IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225886
CVE ID: CVE-2022-22479 State: PUBLISHED Published: 2022-06-10T16:00:22.856836Z Last Updated: 2024-09-16T21:58:06.052Z Severity: MEDIUM (CVSS 5 CVSS:3.0/UI:R/AV:N/S:U/C:L/AC:H/I:L/A:L/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Gain Access Description: IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 225887. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6593721 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6593721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225887
CVE ID: CVE-2022-22480 State: PUBLISHED Published: 2022-10-07T17:00:25.939296Z Last Updated: 2024-09-16T21:03:40.818Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/AC:H/S:U/UI:N/A:N/PR:N/AV:A/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6826695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225889
CVE ID: CVE-2022-22481 State: PUBLISHED Published: 2022-05-09T16:35:21.457903Z Last Updated: 2024-09-17T02:57:43.591Z Severity: LOW (CVSS 3.7 CVSS:3.0/AC:H/S:U/A:N/C:L/AV:N/I:N/UI:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: i Problem Types: Obtain Information Description: IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID:
wever they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6583553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225899
CVE ID: CVE-2022-22482 State: PUBLISHED Published: 2022-05-17T16:25:24.741344Z Last Updated: 2024-09-16T19:46:55.549Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:L/A:H/C:N/AV:N/I:N/S:U/UI:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Denial of Service Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586576 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6586576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225977
CVE ID: CVE-2022-22483 State: PUBLISHED Published: 2022-09-13T20:45:24.113307Z Last Updated: 2024-09-16T17:04:06.830Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/AV:N/PR:L/S:U/AC:L/C:H/A:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6618779 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6618779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/225979 - https://security.netapp.com/advisory/ntap-20230921-0004/
CVE ID: CVE-2022-22484 State: PUBLISHED Published: 2022-05-17T16:00:19.717168Z Last Updated: 2024-09-16T23:56:49.440Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AC:H/A:N/AV:L/PR:N/S:U/C:H/I:N/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322. Additional Anal
acker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6586314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226322
CVE ID: CVE-2022-22485 State: PUBLISHED Published: 2022-06-17T15:20:14.355385Z Last Updated: 2024-09-17T00:10:27.350Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/S:U/UI:N/AV:N/A:N/I:N/C:H/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Server Problem Types: Obtain Information Description: In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 22
brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6595655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226325
CVE ID: CVE-2022-22486 State: PUBLISHED Published: 2023-02-02T17:45:36.250Z Last Updated: 2025-03-27T13:32:38.748Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Tivoli Workload Scheduler Problem Types: CWE-611 Description: IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890697 - https://excha
Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226328
CVE ID: CVE-2022-22487 State: PUBLISHED Published: 2022-06-30T16:25:26.688719Z Last Updated: 2024-09-16T20:07:36.798Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/A:N/AV:N/AC:H/UI:N/PR:N/I:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect Server Problem Types: Obtain Information Description: An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Se
o gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226326
CVE ID: CVE-2022-22488 State: PUBLISHED Published: 2022-11-18T17:02:01.980Z Last Updated: 2025-04-28T19:07:40.468Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: OpenBMC Problem Types: n/a Description: IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6840155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226337
CVE ID: CVE-2022-22489 State: PUBLISHED Published: 2022-08-19T18:50:10.108836Z Last Updated: 2024-09-16T19:14:53.919Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/S:U/A:L/PR:N/UI:N/AC:L/C:H/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Problem Types: Gain Access Description: IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6613021 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6613021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226339
CVE ID: CVE-2022-22490 State: PUBLISHED Published: 2022-08-10T16:50:28.846878Z Last Updated: 2024-09-16T23:11:54.733Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AV:N/S:U/PR:H/I:N/AC:H/C:H/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6610397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226342
CVE ID: CVE-2022-22491 State: PUBLISHED Published: 2025-01-09T14:11:28.233Z Last Updated: 2025-01-09T14:22:35.035Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: CWE-770 Description: IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted. Additional Analyst Notes: - CISA ADP Vulnrichme
g the available storage in a Pod, resulting in that Pod being restarted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7180500
CVE ID: CVE-2022-22493 State: PUBLISHED Published: 2022-10-07T17:00:27.016153Z Last Updated: 2024-09-16T16:44:05.745Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/A:N/UI:R/PR:L/S:U/AC:L/I:L/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: WebSphere Automation for Cloud Pak for Watson AIOps Problem Types: Gain Access Description: IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6826727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226449
CVE ID: CVE-2022-22494 State: PUBLISHED Published: 2022-06-30T16:50:34.927957Z Last Updated: 2024-09-16T23:11:21.509Z Severity: LOW (CVSS 3.7 CVSS:3.0/PR:N/AV:N/S:U/AC:H/C:L/A:N/UI:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596883 - ht
40. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226940
CVE ID: CVE-2022-22495 State: PUBLISHED Published: 2022-05-24T16:20:20.042523Z Last Updated: 2024-09-16T20:26:32.100Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/C:L/S:U/A:L/PR:L/AC:L/I:L/UI:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: i Problem Types: Data Manipulation Description: IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6589203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226941
CVE ID: CVE-2022-22496 State: PUBLISHED Published: 2022-06-30T16:25:31.669987Z Last Updated: 2024-09-17T01:15:47.167Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/S:U/C:H/PR:N/I:N/AV:A/UI:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Server Problem Types: Obtain Information Description: While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596881 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6596881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226942
CVE ID: CVE-2022-22497 State: PUBLISHED Published: 2022-05-24T21:40:09.908903Z Last Updated: 2024-09-16T21:57:04.200Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:N/UI:N/AV:N/I:N/C:H/A:N/AC:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Aspera Faspex Problem Types: Obtain Information Description: IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6589601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/226951
CVE ID: CVE-2022-22502 State: PUBLISHED Published: 2022-06-24T15:35:27.667592Z Last Updated: 2024-09-16T22:39:59.678Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/PR:L/AC:L/A:N/S:C/C:L/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation Problem Types: Cross-Site Scripting Description: IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
sion. IBM X-Force ID: 227124. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/227124
CVE ID: CVE-2022-22503 State: PUBLISHED Published: 2022-10-06T17:15:25.355992Z Last Updated: 2024-09-17T03:47:38.832Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/C:L/UI:R/PR:N/A:N/S:C/AV:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Robotic Process Automation Problem Types: Gain Access Description: IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 227125. Additional Analyst Notes: - CVE Program Container: References: - https