Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4292 State: PUBLISHED Published: 2020-03-02T14:00:23.669922Z Last Updated: 2024-09-17T01:31:43.740Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/S:U/PR:N/AV:N/UI:N/AC:H/A:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5390193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176335
CVE ID: CVE-2020-4294 State: PUBLISHED Published: 2020-04-15T15:13:57.784174Z Last Updated: 2024-09-16T22:36:35.877Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/UI:N/AV:N/PR:L/AC:L/C:L/I:L/S:U/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Qradar, QRadar Problem Types: Gain Access Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189663 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176404 - http://seclists.org/fulldisclosure/2020/Apr/35 - http://packetstormsecurity.com/files/157329/QRadar-Community-Edition-7.3.1.6-Server-Side-Request-Forgery.html
CVE ID: CVE-2020-4295 State: PUBLISHED Published: 2020-06-19T16:10:15.736319Z Last Updated: 2024-09-16T16:43:38.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/AV:N/C:L/I:L/PR:L/AC:L/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176408. Additional Analyst Notes: - CVE Program Container: References: - http
within a trusted session. IBM X-Force ID: 176408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6235162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176408
CVE ID: CVE-2020-4297 State: PUBLISHED Published: 2020-06-19T16:10:16.219768Z Last Updated: 2024-09-16T16:43:56.408Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AV:N/UI:R/PR:L/I:L/AC:L/S:C/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176474. Additional Analyst Notes: - CVE Program Container: References: - http
within a trusted session. IBM X-Force ID: 176474. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6235162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176474
CVE ID: CVE-2020-4298 State: PUBLISHED Published: 2020-05-19T13:15:19.307553Z Last Updated: 2024-09-17T02:07:02.493Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/AV:N/S:C/A:N/AC:L/I:L/C:L/RC:C/E:H/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176475. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.c
sted session. IBM X-Force ID: 176475. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6194775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176475
CVE ID: CVE-2020-4299 State: PUBLISHED Published: 2020-05-14T15:50:44.609029Z Last Updated: 2024-09-16T19:41:14.881Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/UI:N/AV:N/A:N/PR:L/C:L/AC:L/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force ID: 176606. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176606
CVE ID: CVE-2020-4300 State: PUBLISHED Published: 2021-05-31T15:10:42.550659Z Last Updated: 2024-09-17T00:20:47.864Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/UI:N/A:L/AC:L/C:H/PR:N/S:U/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 176607. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176607 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2020-4301 State: PUBLISHED Published: 2022-09-01T19:00:24.592074Z Last Updated: 2024-09-17T00:06:09.107Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/I:L/C:N/AV:N/UI:R/A:N/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176609 -
rences: - https://www.ibm.com/support/pages/node/6615285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176609 - https://security.netapp.com/advisory/ntap-20221014-0005/
CVE ID: CVE-2020-4302 State: PUBLISHED Published: 2020-10-12T13:20:28.623898Z Last Updated: 2024-09-17T01:51:19.069Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/UI:R/I:L/S:U/C:L/A:L/PR:L/AV:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Privileges Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/63
e ID: 176610. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176610
CVE ID: CVE-2020-4303 State: PUBLISHED Published: 2020-04-02T14:20:21.131002Z Last Updated: 2024-09-16T19:14:28.285Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/UI:R/PR:N/I:L/S:C/A:N/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176668. Additional Analyst Notes: - CVE Program Container: References
sclosure within a trusted session. IBM X-Force ID: 176668. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6147195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176668
CVE ID: CVE-2020-4304 State: PUBLISHED Published: 2020-04-02T14:20:21.558740Z Last Updated: 2024-09-17T04:24:39.515Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/PR:N/UI:R/AC:L/AV:N/C:L/A:N/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176670. Additional Analyst Notes: - CVE Program Container: References
sclosure within a trusted session. IBM X-Force ID: 176670. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6147195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176670
CVE ID: CVE-2020-4305 State: PUBLISHED Published: 2020-07-09T19:05:20.949636Z Last Updated: 2024-09-16T19:51:22.944Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AC:H/AV:N/I:H/S:U/PR:N/UI:N/A:H/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677. Additional Analyst Notes: - CVE Program Container: Ref
to execute arbitrary code on the system. IBM X-Force ID: 176677. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6244664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176677
CVE ID: CVE-2020-4306 State: PUBLISHED Published: 2020-05-29T13:10:19.714931Z Last Updated: 2024-09-17T03:47:39.944Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/S:C/PR:L/AV:N/A:N/AC:L/I:L/C:L/E:H/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
n. IBM X-Force ID: 176735. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6213263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176735
CVE ID: CVE-2020-4307 State: PUBLISHED Published: 2020-06-03T14:30:22.184740Z Last Updated: 2024-09-16T16:24:19.325Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/S:U/A:H/AV:A/I:N/UI:N/PR:N/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Denial of Service Description: IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6218974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/176997
CVE ID: CVE-2020-4309 State: PUBLISHED Published: 2020-03-24T15:20:23.270322Z Last Updated: 2024-09-16T16:43:30.517Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/A:N/PR:L/AC:L/C:L/I:N/S:U/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6116032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177080
CVE ID: CVE-2020-4310 State: PUBLISHED Published: 2020-06-16T13:45:21.461931Z Last Updated: 2024-09-17T01:10:57.169Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/I:N/PR:N/S:U/A:H/UI:N/C:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere MQ, MQ Problem Types: Denial of Service Description: IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6223914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177081
CVE ID: CVE-2020-4311 State: PUBLISHED Published: 2020-04-23T13:10:23.928628Z Last Updated: 2024-09-16T18:59:33.454Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:L/S:U/UI:N/A:H/C:H/I:H/PR:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Tivoli Monitoring Problem Types: Gain Privileges Description: IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 177083. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6198358 -
77083. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6198358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177083
CVE ID: CVE-2020-4312 State: PUBLISHED Published: 2020-05-13T12:35:12.324004Z Last Updated: 2024-09-16T20:13:13.360Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/PR:L/A:N/UI:N/C:L/S:U/I:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177089
CVE ID: CVE-2020-4315 State: PUBLISHED Published: 2020-09-21T14:55:23.372171Z Last Updated: 2024-09-16T18:28:23.725Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/PR:N/AV:N/A:N/S:U/UI:R/AC:L/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Business Automation Content Analyzer on Cloud Problem Types: Obtain Information Description: IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the t
oes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177234. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177234
CVE ID: CVE-2020-4316 State: PUBLISHED Published: 2020-07-16T15:05:35.295889Z Last Updated: 2024-09-16T22:20:40.889Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/A:N/AC:L/S:U/I:N/AV:N/UI:R/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Obtain Information Description: IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177
sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177354. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6249131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177354
CVE ID: CVE-2020-4317 State: PUBLISHED Published: 2020-07-28T12:05:25.765689Z Last Updated: 2024-09-16T20:22:16.958Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/UI:R/AV:N/A:N/C:L/AC:L/PR:L/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: Intelligent Operations Center, Water Operations for Waternamics, Intelligent Operations Center for Emergency Management Problem Types: Cross-Site Scripting Description: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote
ulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177355. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177355
CVE ID: CVE-2020-4318 State: PUBLISHED Published: 2020-07-28T12:05:26.224412Z Last Updated: 2024-09-16T23:16:15.640Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/AC:L/C:L/A:N/AV:N/UI:R/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: Intelligent Operations Center for Emergency Management, Water Operations for Waternamics, Intelligent Operations Center Problem Types: Cross-Site Scripting Description: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote
ulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177356. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177356
CVE ID: CVE-2020-4319 State: PUBLISHED Published: 2020-07-28T12:05:26.710761Z Last Updated: 2024-09-16T22:14:21.498Z Severity: LOW (CVSS 3.1 CVSS:3.0/UI:N/I:N/PR:L/S:U/C:L/AC:H/A:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Obtain Information Description: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252777 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177402
CVE ID: CVE-2020-4320 State: PUBLISHED Published: 2020-06-16T13:45:21.961104Z Last Updated: 2024-09-16T20:58:27.407Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/I:N/AC:H/S:U/PR:L/A:H/C:N/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/5736885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177403
CVE ID: CVE-2020-4322 State: PUBLISHED Published: 2020-06-24T14:10:20.837837Z Last Updated: 2024-09-16T20:16:44.204Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/S:U/AV:N/A:N/AC:L/PR:N/UI:R/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Gain Access Description: IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 177511. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
st the victim. IBM X-Force ID: 177511. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177511
CVE ID: CVE-2020-4323 State: PUBLISHED Published: 2020-06-24T14:10:21.266550Z Last Updated: 2024-09-17T02:11:44.325Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/UI:R/I:L/A:N/AC:L/C:L/S:C/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Cross-Site Scripting Description: IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177514. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237286
177514. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177514
CVE ID: CVE-2020-4324 State: PUBLISHED Published: 2020-09-23T13:45:16.376682Z Last Updated: 2024-09-16T17:53:54.345Z Severity: LOW (CVSS 3.5 CVSS:3.0/PR:L/I:L/UI:R/AV:N/A:N/C:N/S:U/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Bypass Security Description: IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177515
CVE ID: CVE-2020-4325 State: PUBLISHED Published: 2020-04-02T14:20:22.033047Z Last Updated: 2024-09-16T20:07:20.525Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:N/S:U/A:H/PR:L/I:N/AV:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Process Federation Server, Automation Workstream Services in Cloud Pak for Automation Problem Types: Denial of Service Description: The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the memory used by those thread pools, which leads
ted systems. As a consequence, the Java Virtual Machine can't recover the memory used by those thread pools, which leads to an OutOfMemory exception when the Process Federation Server Global Teams REST API is used extensively. IBM X-Force ID: 177596. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6125403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/177596