Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22307 State: PUBLISHED Published: 2024-01-31T16:49:28.498Z Last Updated: 2024-11-12T20:18:18.918Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Lab Products: WP-Lister Lite for eBay Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay allows Reflected XSS.This issue affects WP-Lister Lite for eBay: from n/a through 3.5.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-lister-for-ebay/wordpress-wp-lister-lite-for-ebay-plugin-3-5-7-refle
- https://patchstack.com/database/vulnerability/wp-lister-for-ebay/wordpress-wp-lister-lite-for-ebay-plugin-3-5-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-22308 State: PUBLISHED Published: 2024-01-24T11:59:37.234Z Last Updated: 2025-06-17T20:02:37.079Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: smp7, wp.insider Products: Simple Membership Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-membership/wordpress-simple-membership-plugin-4-4-1-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2024-22309 State: PUBLISHED Published: 2024-01-24T11:42:42.859Z Last Updated: 2025-05-23T16:01:17.938Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: QuantumCloud Products: ChatBot with AI Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/chatbot/wordpress-ai-chatbot-plugin-5-1-0-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-22310 State: PUBLISHED Published: 2024-01-31T16:46:44.037Z Last Updated: 2025-06-17T21:29:21.437Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Formzu Inc. Products: Formzu WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/formzu-wp/wordpress-formzu-wp-plugin-1-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-22311 State: PUBLISHED Published: 2024-03-27T05:40:14.116Z Last Updated: 2024-08-02T14:49:24.690Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: N Squared Products: Simply Schedule Appointments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N Squared Simply Schedule Appointments allows Reflected XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.6.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simply-schedule-appointments/wordpress-simply-s
ulnrichment: References: - https://patchstack.com/database/vulnerability/simply-schedule-appointments/wordpress-simply-schedule-appointments-plugin-1-6-6-20-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-22312 State: PUBLISHED Published: 2024-02-10T15:41:46.345Z Last Updated: 2025-06-10T16:17:34.356Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Defender - Resiliency Service Problem Types: CWE-256 Description: IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7115261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/278748
CVE ID: CVE-2024-22313 State: PUBLISHED Published: 2024-02-10T15:43:31.231Z Last Updated: 2025-06-17T21:29:29.959Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Defender - Resiliency Service Problem Types: CWE-798 Description: IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 278749. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7115261 - htt
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7115261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/278749
CVE ID: CVE-2024-22314 State: PUBLISHED Published: 2025-04-16T16:17:54.793Z Last Updated: 2025-08-28T16:40:15.086Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Defender - Resiliency Service Problem Types: CWE-327 Description: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229903
CVE ID: CVE-2024-22315 State: PUBLISHED Published: 2025-01-28T01:50:54.965Z Last Updated: 2025-01-28T15:16:13.786Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Fusion, Fusion HCI, Fusion HCI for watsonx Problem Types: CWE-923 Description: IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179168
CVE ID: CVE-2024-22316 State: PUBLISHED Published: 2025-01-27T16:03:52.880Z Last Updated: 2025-09-29T14:59:55.425Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Sterling File Gateway Problem Types: CWE-863 Description: IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176083
CVE ID: CVE-2024-22317 State: PUBLISHED Published: 2024-01-18T13:16:34.298Z Last Updated: 2025-06-02T15:04:02.999Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: IBM Products: App Connect Enterprise Problem Types: CWE-307 Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. IBM X-Force ID: 279143. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7108661 - https://exchange.xforce
ntainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7108661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279143
CVE ID: CVE-2024-22318 State: PUBLISHED Published: 2024-02-09T00:26:52.792Z Last Updated: 2024-09-20T19:10:15.950Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: i Access Client Solutions Problem Types: CWE-327 Description: IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabled, the Windows operating system will try to authenticate using the current user's session. The hostile server could capture the NTLM hash information to obtain the use
henticate using the current user's session. The hostile server could capture the NTLM hash information to obtain the user's credentials. IBM X-Force ID: 279091. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7116091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279091 - http://packetstormsecurity.com/files/177069/IBM-i-Access-Client-Solutions-Remote-Credential-Theft.html - http://seclists.org/fulldisclosure/2024/Feb/7
CVE ID: CVE-2024-22319 State: PUBLISHED Published: 2024-02-02T02:14:50.571Z Last Updated: 2024-08-01T22:43:34.602Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Operational Decision Manager Problem Types: CWE-74 Description: IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7112382 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/7112382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279145
CVE ID: CVE-2024-22320 State: PUBLISHED Published: 2024-02-02T02:16:32.962Z Last Updated: 2025-05-07T20:09:19.584Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Operational Decision Manager Problem Types: CWE-502 Description: IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www
-Force ID: 279146. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7112382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279146
CVE ID: CVE-2024-22326 State: PUBLISHED Published: 2024-06-06T18:19:08.882Z Last Updated: 2024-08-01T22:43:34.273Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: IBM Products: System Storage DS8900F Problem Types: CWE-306 Description: IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156621 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279518
CVE ID: CVE-2024-22328 State: PUBLISHED Published: 2024-04-06T11:40:29.742Z Last Updated: 2024-08-01T22:43:34.522Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-22 Description: IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 279950. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7147543 - https://exchange.xforce.
chment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7147543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279950
CVE ID: CVE-2024-22329 State: PUBLISHED Published: 2024-04-17T01:21:46.300Z Last Updated: 2024-10-23T15:47:46.996Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: WebSphere Application Server, WebSphere Application Server Liberty Problem Types: CWE-918 Description: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References
SSRF attack. X-Force ID: 279951. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279951
CVE ID: CVE-2024-22330 State: PUBLISHED Published: 2025-06-06T01:08:52.194Z Last Updated: 2025-08-24T11:58:59.780Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-521 Description: IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7235779
CVE ID: CVE-2024-22331 State: PUBLISHED Published: 2024-02-06T16:15:57.695Z Last Updated: 2024-08-01T22:43:34.198Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: UrbanCode Deploy , DevOps Deploy Problem Types: CWE-200 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when installing the Windows agent. IBM X-Force ID: 279971. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7114131 - https://
CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7114131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279971
CVE ID: CVE-2024-22332 State: PUBLISHED Published: 2024-02-09T00:54:41.345Z Last Updated: 2024-08-01T22:43:34.513Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Integration Bus for z/OS Problem Types: CWE-400 Description: The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion. IBM X-Force ID: 279972. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7116046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279972
CVE ID: CVE-2024-22333 State: PUBLISHED Published: 2024-06-13T13:55:39.767Z Last Updated: 2024-08-24T10:50:37.540Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Maximo Application Suite, Maximo Asset Management Problem Types: CWE-525 Description: IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7157256 - https://www.ibm.com/support/pages/node/7157257 - https://exchange.xforce.
tps://www.ibm.com/support/pages/node/7157256 - https://www.ibm.com/support/pages/node/7157257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279973
CVE ID: CVE-2024-22334 State: PUBLISHED Published: 2024-04-12T16:41:15.797Z Last Updated: 2024-08-01T22:43:34.546Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-732 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type. When deleting a custom security type, associated permissions of objects using that type may not be fully revoked. This could lead to incorrect reporting of perm
sociated permissions of objects using that type may not be fully revoked. This could lead to incorrect reporting of permission configuration and unexpected privileges being retained. IBM X-Force ID: 279974. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279974
CVE ID: CVE-2024-22335 State: PUBLISHED Published: 2024-02-17T15:32:52.147Z Last Updated: 2024-08-01T22:43:34.568Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-532 Description: IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279975. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279975
CVE ID: CVE-2024-22336 State: PUBLISHED Published: 2024-02-17T15:45:35.951Z Last Updated: 2024-08-01T22:43:34.457Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-532 Description: IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279976. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279976
CVE ID: CVE-2024-22337 State: PUBLISHED Published: 2024-02-17T15:46:54.741Z Last Updated: 2024-08-01T22:43:34.455Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-532 Description: IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279977. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/7118642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279977
CVE ID: CVE-2024-22338 State: PUBLISHED Published: 2024-05-31T10:36:52.708Z Last Updated: 2024-08-01T22:43:34.527Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Access OIDC Provider Problem Types: CWE-20 Description: IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279978
CVE ID: CVE-2024-22339 State: PUBLISHED Published: 2024-04-12T16:51:39.984Z Last Updated: 2024-08-01T22:43:34.617Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-532 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfuscation of sensitive values from some log files. IBM X-Force ID: 279979. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/279979
CVE ID: CVE-2024-22340 State: PUBLISHED Published: 2025-03-11T00:50:55.148Z Last Updated: 2025-09-01T01:07:29.781Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Common Cryptographic Architecture, 4769 Developers Toolkit Problem Types: CWE-208 Description: IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7185282
CVE ID: CVE-2024-22341 State: PUBLISHED Published: 2025-02-22T00:38:24.208Z Last Updated: 2025-09-30T13:42:47.772Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Watson Query on Cloud Pak for Data Problem Types: CWE-73 Description: IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183851
CVE ID: CVE-2024-22343 State: PUBLISHED Published: 2024-05-10T17:29:21.478Z Last Updated: 2024-08-01T22:43:34.466Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-525 Description: IBM TXSeries for Multiplatforms 8.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 280190. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280190
CVE ID: CVE-2024-22344 State: PUBLISHED Published: 2024-05-10T17:41:53.307Z Last Updated: 2025-03-28T20:01:07.010Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: 80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
e. IBM X-Force ID: 280191. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/280191