Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4478 State: PUBLISHED Published: 2020-05-12T13:40:16.773845Z Last Updated: 2024-09-17T02:21:03.520Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AV:N/I:N/S:U/UI:N/AC:L/C:H/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information that they should not normally have access to. IBM X-Force ID: 163998. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/163998
CVE ID: CVE-2019-4481 State: PUBLISHED Published: 2019-08-20T18:25:26.966240Z Last Updated: 2024-09-17T02:10:37.612Z Severity: HIGH (CVSS 7.6 CVSS:3.0/C:L/A:L/AC:L/S:U/AV:N/UI:N/PR:L/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: Emptoris Spend Analysis, Contract Management Problem Types: Data Manipulation Description: IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164064. Additional Analyst Notes: - CVE Program Container: References: -
tion in the back-end database. IBM X-Force ID: 164064. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164064
CVE ID: CVE-2019-4482 State: PUBLISHED Published: 2019-08-20T19:30:25.671622Z Last Updated: 2024-09-16T19:24:08.116Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/I:L/UI:R/PR:L/AC:L/C:L/AV:N/S:C/RL:O/RC:C/E:H) Vendors: IBM Products: Emptoris Spend Analysis Problem Types: Cross-Site Scripting Description: IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164066. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
n. IBM X-Force ID: 164066. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164066
CVE ID: CVE-2019-4483 State: PUBLISHED Published: 2019-08-20T18:25:27.014567Z Last Updated: 2024-09-17T01:51:43.626Z Severity: HIGH (CVSS 7.6 CVSS:3.0/UI:N/I:H/PR:L/S:U/AV:N/AC:L/C:L/A:L/RL:O/RC:C/E:U) Vendors: IBM Products: Contract Management, Emptoris Spend Analysis Problem Types: Data Manipulation Description: IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164067. Additional Analyst Notes: - CVE Program Container: References: -
tion in the back-end database. IBM X-Force ID: 164067. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164067
CVE ID: CVE-2019-4484 State: PUBLISHED Published: 2019-08-20T18:25:27.063733Z Last Updated: 2024-09-17T02:01:06.906Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/PR:L/UI:N/AV:N/S:U/AC:L/A:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Contract Management, Emptoris Spend Analysis, Emptoris Sourcing Problem Types: Obtain Information Description: IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164068. Additional Analyst Notes: - CVE Program Container: References: - https:
acks against the system. IBM X-Force ID: 164068. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164068
CVE ID: CVE-2019-4485 State: PUBLISHED Published: 2019-08-20T18:25:27.111414Z Last Updated: 2024-09-17T01:50:37.798Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/C:L/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Contract Management, Emptoris Spend Analysis, Emptoris Sourcing Problem Types: Obtain Information Description: IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069. Additional Analyst Notes: - CVE Program Container: References: - https:
acks against the system. IBM X-Force ID: 164069. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164069
CVE ID: CVE-2019-4486 State: PUBLISHED Published: 2019-10-24T12:00:39.114131Z Last Updated: 2024-09-17T02:27:26.425Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/C:L/S:C/PR:L/A:N/AV:N/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164070. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1075023
164070. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1075023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164070
CVE ID: CVE-2019-4494 State: PUBLISHED Published: 2019-10-01T14:30:24.411487Z Last Updated: 2024-09-17T03:18:00.110Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/PR:L/AC:L/AV:N/S:C/UI:R/A:N/RL:O/RC:C/E:H) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164115. Additional Analyst Notes: - CVE Program Container: R
ntials disclosure within a trusted session. IBM X-Force ID: 164115. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164115
CVE ID: CVE-2019-4495 State: PUBLISHED Published: 2019-10-01T14:30:24.865586Z Last Updated: 2024-09-16T19:56:59.279Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/S:C/AV:N/A:N/UI:R/PR:L/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164116. Additional Analyst Notes: - CVE Program Container: R
ntials disclosure within a trusted session. IBM X-Force ID: 164116. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164116
CVE ID: CVE-2019-4497 State: PUBLISHED Published: 2019-10-01T14:30:25.312029Z Last Updated: 2024-09-17T01:45:42.161Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/PR:L/A:N/UI:R/AV:N/S:C/I:L/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164118. Additional Analyst Notes: - CVE Program Container: R
ntials disclosure within a trusted session. IBM X-Force ID: 164118. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164118
CVE ID: CVE-2019-4505 State: PUBLISHED Published: 2019-09-20T15:50:11.775068Z Last Updated: 2024-09-17T02:15:59.412Z Severity: LOW (CVSS 3.7 CVSS:3.0/PR:N/A:N/S:U/AV:N/AC:H/C:L/I:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/964766 - https://exchan
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/964766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164364
CVE ID: CVE-2019-4508 State: PUBLISHED Published: 2020-01-10T15:35:14.680109Z Last Updated: 2024-09-17T03:59:35.320Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/S:U/I:N/AC:H/C:H/A:N/PR:N/AV:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. IBM X-Force ID: 164429. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1170334 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164429
CVE ID: CVE-2019-4509 State: PUBLISHED Published: 2019-11-09T01:41:10.229143Z Last Updated: 2024-09-17T01:06:47.059Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/C:L/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar Problem Types: Obtain Information Description: IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 164430. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1103931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164430
CVE ID: CVE-2019-4512 State: PUBLISHED Published: 2019-10-09T15:00:23.883418Z Last Updated: 2024-09-17T02:36:34.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/I:N/C:L/S:U/UI:N/A:N/PR:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1075413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164554
CVE ID: CVE-2019-4513 State: PUBLISHED Published: 2019-08-26T14:40:15.019867Z Last Updated: 2024-09-17T03:47:37.666Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AC:L/A:L/PR:N/I:N/S:U/UI:N/C:H/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Access Manager for Enterprise Single Sign-On Problem Types: Obtain Information Description: IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/s
resources. IBM X-Force ID: 164555. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10996716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/164555
CVE ID: CVE-2019-4514 State: PUBLISHED Published: 2019-10-04T14:05:20.691260Z Last Updated: 2024-09-16T16:18:07.671Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/S:U/A:N/PR:N/AV:N/C:L/UI:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165136. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/302017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165136
CVE ID: CVE-2019-4515 State: PUBLISHED Published: 2019-09-24T13:50:14.273337Z Last Updated: 2024-09-16T19:09:54.075Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/S:U/UI:R/I:L/C:N/AV:N/A:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Gain Access Description: IBM Security Key Lifecycle Manager 3.0 and 3.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 165137. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/290671 - https://exchange.xforce.ibmcloud.com/vulnerabil
Container: References: - https://www.ibm.com/support/pages/node/290671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165137
CVE ID: CVE-2019-4520 State: PUBLISHED Published: 2019-10-02T14:45:28.645484Z Last Updated: 2024-09-17T03:18:11.466Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/UI:N/PR:N/A:N/I:N/AV:N/S:U/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165178
CVE ID: CVE-2019-4521 State: PUBLISHED Published: 2019-12-10T16:10:24.121574Z Last Updated: 2024-09-17T00:45:36.676Z Severity: HIGH (CVSS 7 CVSS:3.0/UI:R/PR:N/C:H/S:U/AC:H/A:H/AV:L/I:H/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud Pak System Problem Types: Gain Access Description: Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 165179. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1126605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165179
CVE ID: CVE-2019-4523 State: PUBLISHED Published: 2019-10-22T14:27:44.016474Z Last Updated: 2024-09-16T22:46:53.445Z Severity: HIGH (CVSS 8.4 CVSS:3.0/PR:N/AV:L/UI:N/C:H/I:H/A:H/S:U/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Db2 High Performance Unload load for LUW, DB2 High Performance Unload load for LUW Problem Types: Gain Privileges Description: IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/sup
X-Force ID: 165481. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/support/pages/node/1073236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165481
CVE ID: CVE-2019-4530 State: PUBLISHED Published: 2019-11-20T16:16:11.268913Z Last Updated: 2024-09-17T04:09:08.763Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/PR:L/S:U/UI:N/AC:L/A:N/AV:N/I:L/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Privileges Description: IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be able to. IBM X-Force ID: 165586. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1108503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165586
CVE ID: CVE-2019-4533 State: PUBLISHED Published: 2020-08-28T14:35:19.141907Z Last Updated: 2024-09-16T18:18:53.865Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/PR:L/AV:N/C:N/S:U/AC:L/A:L/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Resilient SOAR Problem Types: Denial of Service Description: IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165589
CVE ID: CVE-2019-4536 State: PUBLISHED Published: 2019-08-29T15:00:16.937169Z Last Updated: 2024-09-16T16:33:45.400Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/I:H/S:U/UI:N/PR:N/C:H/AC:H/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: i Problem Types: Gain Privileges Description: IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592. Additional Analyst Notes: - CVE Pro
bility to obtain elevated privileges on the restored system. IBM X-Force ID: 165592. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm11071586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165592
CVE ID: CVE-2019-4537 State: PUBLISHED Published: 2020-02-26T15:55:22.984472Z Last Updated: 2024-09-17T03:07:27.825Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/S:U/AC:L/A:N/UI:N/PR:N/I:N/C:L/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Service Registry and Repository Problem Types: Obtain Information Description: IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3436359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165593
CVE ID: CVE-2019-4538 State: PUBLISHED Published: 2019-10-02T14:45:29.063624Z Last Updated: 2024-09-16T18:39:34.799Z Severity: HIGH (CVSS 7.4 CVSS:3.0/PR:N/A:N/I:H/AV:N/S:C/C:N/AC:L/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Security Directory Server Problem Types: Gain Access Description: IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive informatio
malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 165660. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165660
CVE ID: CVE-2019-4539 State: PUBLISHED Published: 2019-10-02T14:45:29.486636Z Last Updated: 2024-09-17T00:35:34.193Z Severity: HIGH (CVSS 7.1 CVSS:3.0/PR:L/A:H/I:L/AV:N/S:U/C:N/AC:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Denial of Service Description: IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabil
ontainer: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165812
CVE ID: CVE-2019-4540 State: PUBLISHED Published: 2020-02-04T16:45:34.586430Z Last Updated: 2024-09-16T22:52:11.808Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/I:N/A:N/UI:N/C:H/S:U/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Directory Server Problem Types: Obtain Information Description: IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165813
CVE ID: CVE-2019-4541 State: PUBLISHED Published: 2020-02-04T16:45:35.031509Z Last Updated: 2024-09-17T04:05:01.708Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:H/S:U/UI:N/C:H/I:N/A:H/AV:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Directory Server Problem Types: Bypass Security Description: IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165814
CVE ID: CVE-2019-4542 State: PUBLISHED Published: 2019-10-02T14:45:29.955440Z Last Updated: 2024-09-16T21:02:18.589Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/A:N/I:L/AV:N/S:C/C:L/AC:L/UI:R/E:H/RL:O/RC:C) Vendors: IBM Products: Security Directory Server Problem Types: Cross-Site Scripting Description: IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1
ce ID: 165815. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1077045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165815
CVE ID: CVE-2019-4545 State: PUBLISHED Published: 2020-10-08T13:20:16.109123Z Last Updated: 2024-09-16T17:22:49.589Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:H/A:H/UI:N/I:H/PR:N/C:H/S:U/AV:A/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6344077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/165877