Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20535 State: PUBLISHED Published: 2021-05-13T15:30:11.675671Z Last Updated: 2024-09-16T18:13:31.937Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:L/AV:N/PR:N/S:U/I:L/A:N/UI:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Jazz Reporting Service Problem Types: Gain Access Description: IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6452323
198834. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6452323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198834
CVE ID: CVE-2021-20536 State: PUBLISHED Published: 2021-04-26T16:30:44.358105Z Last Updated: 2024-09-16T18:08:48.237Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/UI:N/A:N/S:U/AV:L/AC:L/C:H/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 198836. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198836
CVE ID: CVE-2021-20537 State: PUBLISHED Published: 2021-07-15T17:16:04.895657Z Last Updated: 2024-09-16T23:56:03.533Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/UI:N/PR:L/I:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Access Docker Problem Types: Obtain Information Description: IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID:198918 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198918
CVE ID: CVE-2021-20538 State: PUBLISHED Published: 2021-05-10T16:20:16.064057Z Last Updated: 2024-09-17T01:10:48.605Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/I:L/PR:N/AC:H/AV:N/S:U/C:L/UI:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Security Problem Types: Gain Access Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect authorization mechanisms. IBM X-Force ID: 198919. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6450849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198919
CVE ID: CVE-2021-20539 State: PUBLISHED Published: 2021-08-02T16:35:19.890412Z Last Updated: 2024-09-16T19:31:04.252Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/A:N/S:U/UI:N/C:L/I:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198920. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198920
CVE ID: CVE-2021-20540 State: PUBLISHED Published: 2021-08-02T16:35:21.783995Z Last Updated: 2024-09-16T17:24:03.699Z Severity: LOW (CVSS 2.7 CVSS:3.0/AC:L/AV:N/A:N/S:U/C:L/UI:N/PR:H/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198923
CVE ID: CVE-2021-20541 State: PUBLISHED Published: 2021-08-02T16:35:23.472482Z Last Updated: 2024-09-16T19:10:36.538Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AV:N/AC:H/I:N/PR:N/C:L/UI:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198927
CVE ID: CVE-2021-20543 State: PUBLISHED Published: 2022-06-24T16:15:35.863427Z Last Updated: 2024-09-17T00:10:39.778Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/AC:L/A:N/PR:L/AV:N/UI:R/C:L/I:L/E:U/RL:O/RC:C) Vendors: IBM Products: Jazz Team Server Problem Types: Gain Access Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 198929. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597515 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198929
CVE ID: CVE-2021-20544 State: PUBLISHED Published: 2022-06-24T16:15:37.449176Z Last Updated: 2024-09-16T22:56:00.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/PR:L/A:N/S:U/AC:L/UI:N/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Jazz Team Server Problem Types: Gain Access Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198931. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597513 - htt
1. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198931
CVE ID: CVE-2021-20546 State: PUBLISHED Published: 2021-04-26T16:30:44.990531Z Last Updated: 2024-09-16T19:19:34.477Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/S:U/I:N/UI:N/AV:L/AC:L/C:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Protect for Space Management Problem Types: Denial of Service Description: IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445497 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6445497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198934
CVE ID: CVE-2021-20549 State: PUBLISHED Published: 2021-04-27T16:32:51.128893Z Last Updated: 2024-09-17T04:04:42.042Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/S:C/AC:L/AV:N/A:N/C:L/UI:R/PR:L/RL:O/RC:C/E:H) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447143 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199167
CVE ID: CVE-2021-20550 State: PUBLISHED Published: 2021-04-27T16:32:51.789495Z Last Updated: 2024-09-16T16:53:39.827Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/C:L/A:N/UI:R/S:C/AC:L/I:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447143 - https
Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199168
CVE ID: CVE-2021-20551 State: PUBLISHED Published: 2022-06-24T16:15:39.197374Z Last Updated: 2024-09-17T03:28:38.565Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/A:N/AC:L/PR:N/UI:N/AV:L/C:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz Team Server Problem Types: Obtain Information Description: IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6597511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199169
CVE ID: CVE-2021-20552 State: PUBLISHED Published: 2021-10-07T18:05:53.704165Z Last Updated: 2024-09-16T18:39:27.124Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/I:N/PR:L/AC:L/C:L/S:U/UI:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199170. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496771 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199170
CVE ID: CVE-2021-20553 State: PUBLISHED Published: 2024-12-18T23:39:03.856Z Last Updated: 2024-12-19T16:39:07.625Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-79 Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6496761
CVE ID: CVE-2021-20554 State: PUBLISHED Published: 2021-09-30T16:20:15.003439Z Last Updated: 2024-09-17T03:02:18.369Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/I:L/AV:N/UI:R/S:C/C:L/AC:L/PR:N/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling Order Management Problem Types: Cross-Site Scripting Description: IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199179. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 199179. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6493881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199179
CVE ID: CVE-2021-20556 State: PUBLISHED Published: 2024-05-03T17:31:31.243Z Last Updated: 2024-08-03T17:45:44.323Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-204 Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199181
CVE ID: CVE-2021-20557 State: PUBLISHED Published: 2021-05-24T13:55:41.829553Z Last Updated: 2024-09-16T22:45:31.817Z Severity: HIGH (CVSS 7.2 CVSS:3.0/I:H/S:U/AC:L/A:H/C:H/UI:N/AV:N/PR:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 199184. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199184
CVE ID: CVE-2021-20559 State: PUBLISHED Published: 2021-05-10T16:20:16.761688Z Last Updated: 2024-09-17T01:21:57.029Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/AC:L/AV:N/PR:L/S:C/A:N/C:L/UI:R/RC:C/E:U/RL:O) Vendors: IBM Products: Control Desk Problem Types: Cross-Site Scripting Description: IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199228. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6450759 - ht
28. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6450759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199228
CVE ID: CVE-2021-20560 State: PUBLISHED Published: 2021-07-26T12:10:39.190612Z Last Updated: 2024-09-16T16:33:39.597Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/PR:L/AC:L/C:L/AV:N/UI:R/A:N/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling Connect:Direct Browser User Interface Problem Types: Gain Access Description: IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 199229. Additional Analys
victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 199229. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6474829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199229
CVE ID: CVE-2021-20561 State: PUBLISHED Published: 2021-10-07T18:05:55.485168Z Last Updated: 2024-09-16T20:22:33.050Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AC:L/I:L/AV:N/A:N/UI:R/S:C/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199230. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 199230. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199230
CVE ID: CVE-2021-20562 State: PUBLISHED Published: 2021-07-27T11:25:17.174877Z Last Updated: 2024-09-16T16:48:16.529Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/A:N/I:L/S:C/AV:N/PR:L/C:L/UI:R/RC:C/E:H/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232. Additional Analyst Notes: - CVE Program Contai
credentials disclosure within a trusted session. IBM X-Force ID: 199232. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6475301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199232 - http://seclists.org/fulldisclosure/2021/Nov/16 - http://packetstormsecurity.com/files/164782/IBM-Sterling-B2B-Integrator-Cross-Site-Scripting.html
CVE ID: CVE-2021-20563 State: PUBLISHED Published: 2021-09-23T17:10:37.149731Z Last Updated: 2024-09-16T17:13:57.309Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/AV:N/S:U/I:N/C:L/UI:N/AC:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 199234. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 199234. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199234
CVE ID: CVE-2021-20564 State: PUBLISHED Published: 2021-05-14T16:15:38.024187Z Last Updated: 2024-09-16T19:01:41.655Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/UI:N/I:N/AC:H/AV:N/C:H/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 199235. Additional Analyst Notes: - CVE Program Contain
information using man in the middle techniques. IBM X-Force ID: 199235. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199235
CVE ID: CVE-2021-20565 State: PUBLISHED Published: 2021-05-14T16:15:38.687151Z Last Updated: 2024-09-16T18:34:13.256Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/PR:N/UI:R/AC:L/I:L/C:N/A:L/AV:A/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Gain Access Description: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453115 - https://
ditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199236
CVE ID: CVE-2021-20566 State: PUBLISHED Published: 2021-06-16T16:15:21.363905Z Last Updated: 2024-09-16T16:33:49.643Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/S:U/AC:H/I:N/PR:N/UI:N/AV:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Resilient SOAR Problem Types: Obtain Information Description: IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199238
CVE ID: CVE-2021-20567 State: PUBLISHED Published: 2021-06-16T16:15:22.901340Z Last Updated: 2024-09-17T04:04:49.071Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/PR:H/UI:N/AV:L/C:H/A:N/S:U/AC:L/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Resilient SOAR Problem Types: Obtain Information Description: IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199239
CVE ID: CVE-2021-20569 State: PUBLISHED Published: 2021-09-14T13:25:24.269154Z Last Updated: 2024-09-16T20:48:07.733Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/UI:N/AC:L/I:N/C:L/AV:N/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199243
CVE ID: CVE-2021-20571 State: PUBLISHED Published: 2021-10-07T18:05:57.067380Z Last Updated: 2024-09-16T22:24:40.991Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/UI:N/A:N/C:L/S:C/I:L/PR:L/AC:H/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199246. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
ted session. IBM X-Force ID: 199246. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199246
CVE ID: CVE-2021-20572 State: PUBLISHED Published: 2021-06-28T16:10:20.871720Z Last Updated: 2024-09-16T17:38:01.836Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/UI:N/I:N/C:N/PR:L/S:U/A:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Manager Adapters Problem Types: Denial of Service Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199247. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.co