Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1783 State: PUBLISHED Published: 2018-10-05T13:00:00 Last Updated: 2024-08-05T04:07:44.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. IBM X-Force ID: 148806. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10732717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148806
CVE ID: CVE-2018-1784 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T22:09:57.690Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106316 - http://www.ibm.com/support/docview.wss?uid=ibm10737883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148807
CVE ID: CVE-2018-1785 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-16T17:04:14.997Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10729873 - http://www.securitytracker.com/id/1041716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
.wss?uid=ibm10729873 - http://www.securitytracker.com/id/1041716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148870
CVE ID: CVE-2018-1786 State: PUBLISHED Published: 2018-11-12T16:00:00Z Last Updated: 2024-09-17T01:01:42.386Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Denial of Service Description: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148871 - http://www.ibm.com/support/docview.wss?uid=ibm10738765 - http://www.
change.xforce.ibmcloud.com/vulnerabilities/148871 - http://www.ibm.com/support/docview.wss?uid=ibm10738765 - http://www.securityfocus.com/bid/105940
CVE ID: CVE-2018-1787 State: PUBLISHED Published: 2019-04-08T14:50:37.708649Z Last Updated: 2024-09-16T21:08:25.633Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/C:H/AC:H/I:N/PR:N/A:N/AV:L/UI:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10869602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148872
CVE ID: CVE-2018-1788 State: PUBLISHED Published: 2018-11-02T15:00:00Z Last Updated: 2024-09-16T22:09:38.555Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148873 - http://www.securityfocus.com/bid/105818 - http://www.ibm.com/support/docview.wss?uid=ibm10730357 - http://www.securitytracker.com/id/10420
yfocus.com/bid/105818 - http://www.ibm.com/support/docview.wss?uid=ibm10730357 - http://www.securitytracker.com/id/1042032
CVE ID: CVE-2018-1789 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-17T01:36:25.519Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:L/AC:H/AV:N/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Access Description: IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148939 - https://www.ibm.com/support/docview.wss?uid=ibm10728517
CVE ID: CVE-2018-1790 State: PUBLISHED Published: 2019-05-10T14:40:19.903410Z Last Updated: 2024-09-16T22:02:57.970Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/PR:N/UI:R/AV:N/I:L/C:N/A:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Financial Transaction Manager Problem Types: Gain Access Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 148944. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10731607 - https://
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10731607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148944
CVE ID: CVE-2018-1791 State: PUBLISHED Published: 2018-09-14T12:00:00Z Last Updated: 2024-09-17T01:56:13.984Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/A:L/AC:H/AV:N/C:L/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Connections Problem Types: Gain Access Description: IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731207 - h
tional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148946
CVE ID: CVE-2018-1792 State: PUBLISHED Published: 2018-11-13T15:00:00Z Last Updated: 2024-09-16T16:27:25.936Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148947 - https://www.ibm.com/support/docview.wss?uid=ibm10734447
CVE ID: CVE-2018-1793 State: PUBLISHED Published: 2018-10-03T14:00:00Z Last Updated: 2024-09-16T19:10:04.424Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148948. Additional Analyst Notes: - CVE Program Container: References: - https://w
in a trusted session. IBM X-Force ID: 148948. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/148948 - http://www.securitytracker.com/id/1041801
CVE ID: CVE-2018-1794 State: PUBLISHED Published: 2018-10-03T14:00:00Z Last Updated: 2024-09-16T19:41:22.042Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using OAuth ear is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148949. Additional Analyst Notes: - CVE Program Container: References: - https://
hin a trusted session. IBM X-Force ID: 148949. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/148949 - https://www.ibm.com/support/docview.wss?uid=ibm10729571 - http://www.securitytracker.com/id/1041802
CVE ID: CVE-2018-1795 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-17T01:00:38.481Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Cross-Site Scripting Description: IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149073. Additional Analyst Notes: - CVE Program Container: R
ntials disclosure within a trusted session. IBM X-Force ID: 149073. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10730615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149073
CVE ID: CVE-2018-1796 State: PUBLISHED Published: 2019-08-20T18:50:23.022028Z Last Updated: 2024-09-17T02:52:24.389Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/C:H/PR:L/UI:N/S:U/AC:L/AV:L/A:H/E:U/RC:C/RL:O) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149426
CVE ID: CVE-2018-1797 State: PUBLISHED Published: 2018-11-16T16:00:00Z Last Updated: 2024-09-17T02:15:38.311Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:N/AC:L/AV:L/C:N/I:H/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: File Manipulation Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing "dot dot slash" sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as "Zip-Sl
could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as "Zip-Slip". IBM X-Force ID: 149427. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149427 - http://www.securityfocus.com/bid/105982 - http://www.securitytracker.com/id/1042146 - https://www.ibm.com/support/docview.wss?uid=ibm10730699
CVE ID: CVE-2018-1798 State: PUBLISHED Published: 2018-11-12T16:00:00Z Last Updated: 2024-09-17T03:28:29.455Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149428. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytrack
ssion. IBM X-Force ID: 149428. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149428 - http://www.ibm.com/support/docview.wss?uid=ibm10730703 - http://www.securityfocus.com/bid/105945
CVE ID: CVE-2018-1799 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T23:56:54.173Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:N/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could cause damage to the database. IBM X-Force ID: 149429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105885 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - https://e
ferences: - http://www.securityfocus.com/bid/105885 - http://www.ibm.com/support/docview.wss?uid=ibm10733939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149429 - http://www.securitytracker.com/id/1042086
CVE ID: CVE-2018-1800 State: PUBLISHED Published: 2018-09-20T15:00:00Z Last Updated: 2024-09-16T17:48:58.826Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149607 - https://www.ibm.com/support/docview.wss?uid=ibm10731379
CVE ID: CVE-2018-1801 State: PUBLISHED Published: 2019-02-04T21:00:00Z Last Updated: 2024-09-17T04:19:23.303Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Integration Bus, WebSphere Message Broker, App Connect Problem Types: Denial of Service Description: IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force I
when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149639 - http://www.ibm.com/support/docview.wss?uid=ibm10795780
CVE ID: CVE-2018-1802 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T20:36:17.290Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 149640. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105962 - https://exch
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149640 - http://www.securitytracker.com/id/1042082 - http://www.ibm.com/support/docview.wss?uid=ibm10733122
CVE ID: CVE-2018-1803 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T20:41:52.251Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Gain Access Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 149702. Additional Analyst Note
's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 149702. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149702
CVE ID: CVE-2018-1804 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T04:08:52.255Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 149703. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities
3. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149703 - http://www.ibm.com/support/docview.wss?uid=ibm10787785
CVE ID: CVE-2018-1805 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T19:36:35.987Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 149704. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149704 - http://www.ibm.com/support/docview.wss?uid=ibm107
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149704 - http://www.ibm.com/support/docview.wss?uid=ibm10787785
CVE ID: CVE-2018-1808 State: PUBLISHED Published: 2018-11-13T15:00:00Z Last Updated: 2024-09-17T03:53:51.048Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Commerce Problem Types: Gain Access Description: IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149828 - https://www-01.ibm.com/support/docview.wss?uid=ibm10735905
CVE ID: CVE-2018-1812 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-17T02:10:49.163Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Cross-Site Scripting Description: IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web browser within the security context of the hosting Web site, once victim opens a cert
o execute script in a victim's web browser within the security context of the hosting Web site, once victim opens a certain page in Control Room. IBM X-Force ID: 149883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/149883
CVE ID: CVE-2018-1813 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T23:51:30.393Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Gain Access Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://e
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150017
CVE ID: CVE-2018-1814 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-17T04:20:32.813Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Obtain Information Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 150018. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150018 - http://www.ibm.com/support/docview.wss?ui
r: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/150018 - http://www.ibm.com/support/docview.wss?uid=ibm10787785
CVE ID: CVE-2018-1815 State: PUBLISHED Published: 2018-12-13T16:00:00Z Last Updated: 2024-09-16T20:07:08.600Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Cross-Site Scripting Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150019. Additional Analyst Notes
potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150019. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10787785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/150019