Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29677 State: PUBLISHED Published: 2021-06-25T17:40:30.234198Z Last Updated: 2024-09-17T00:30:34.925Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/UI:R/PR:L/C:L/AC:L/I:L/A:N/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Security Verify Privilege Vault Problem Types: Cross-Site Scripting Description: IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
e within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199578
CVE ID: CVE-2021-29678 State: PUBLISHED Published: 2021-12-09T17:00:26.346961Z Last Updated: 2024-09-16T17:33:35.953Z Severity: HIGH (CVSS 8.7 CVSS:3.0/C:H/PR:H/S:C/AV:N/I:H/AC:L/UI:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Access Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199914 - https://secu
ps://www.ibm.com/support/pages/node/6523806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199914 - https://security.netapp.com/advisory/ntap-20220114-0002/
CVE ID: CVE-2021-29679 State: PUBLISHED Published: 2021-10-15T15:55:18.978232Z Last Updated: 2024-09-17T01:21:01.928Z Severity: HIGH (CVSS 8.8 CVSS:3.0/PR:L/AV:N/S:U/A:H/UI:N/I:H/AC:L/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Privileges Description: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199
References: - https://www.ibm.com/support/pages/node/6491661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199915 - https://security.netapp.com/advisory/ntap-20211112-0005/
CVE ID: CVE-2021-29681 State: PUBLISHED Published: 2021-05-21T17:45:16.297021Z Last Updated: 2024-09-17T00:21:54.687Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/UI:N/PR:N/C:L/S:U/AC:H/AV:A/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be used in further attacks against the system. IBM X-Force ID: 199918. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454591 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/6454591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199917
CVE ID: CVE-2021-29682 State: PUBLISHED Published: 2021-05-20T15:10:29.451609Z Last Updated: 2024-09-16T20:06:39.488Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/S:U/C:L/AV:N/A:N/AC:L/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199997 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199997
CVE ID: CVE-2021-29683 State: PUBLISHED Published: 2021-05-20T15:10:30.105925Z Last Updated: 2024-09-17T00:02:12.555Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/PR:L/AV:N/A:N/AC:H/I:N/C:H/S:U/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 199998. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199998
CVE ID: CVE-2021-29686 State: PUBLISHED Published: 2021-05-20T15:10:30.753104Z Last Updated: 2024-09-17T00:35:41.604Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/UI:N/C:L/S:U/AV:N/A:N/AC:L/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Bypass Security Description: IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to. IBM X-Force ID: 200015 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200015
CVE ID: CVE-2021-29687 State: PUBLISHED Published: 2021-05-20T15:10:31.400033Z Last Updated: 2024-09-16T20:07:18.120Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AV:N/I:N/AC:H/C:L/S:U/UI:N/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200018
CVE ID: CVE-2021-29688 State: PUBLISHED Published: 2021-05-20T15:10:32.109678Z Last Updated: 2024-09-17T00:51:05.256Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/UI:N/S:U/C:L/A:N/AV:N/I:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 200102. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://www.ibm.com/suppo
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://www.ibm.com/support/pages/node/6454605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200102
CVE ID: CVE-2021-29691 State: PUBLISHED Published: 2021-05-20T15:10:32.826141Z Last Updated: 2024-09-16T23:36:16.681Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/S:U/I:N/AC:H/A:N/AV:N/PR:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 200252. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforc
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200252
CVE ID: CVE-2021-29692 State: PUBLISHED Published: 2021-05-20T15:10:33.497712Z Last Updated: 2024-09-16T18:54:06.200Z Severity: LOW (CVSS 3.1 CVSS:3.0/C:L/S:U/I:N/AC:H/A:N/AV:N/PR:N/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 200253. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
s. IBM X-Force ID: 200253. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200253
CVE ID: CVE-2021-29693 State: PUBLISHED Published: 2021-06-28T15:55:23.763125Z Last Updated: 2024-09-17T03:55:05.247Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AC:L/A:H/I:N/PR:H/AV:N/UI:N/S:U/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: VIOS, AIX Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200255
CVE ID: CVE-2021-29694 State: PUBLISHED Published: 2021-04-26T16:30:46.327846Z Last Updated: 2024-09-17T00:11:10.620Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/S:U/I:N/UI:N/AV:N/C:H/PR:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200258
CVE ID: CVE-2021-29695 State: PUBLISHED Published: 2021-05-25T16:00:17.247810Z Last Updated: 2024-09-16T20:59:08.689Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/PR:H/S:U/UI:N/AC:L/C:N/I:H/AV:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: 8335-GTB, 8335-GTA, 8335-GCA Problem Types: File Manipulation Description: IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454303 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200558
CVE ID: CVE-2021-29696 State: PUBLISHED Published: 2021-08-02T16:35:25.142418Z Last Updated: 2024-09-17T01:56:08.481Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:H/AV:N/A:H/S:C/I:H/PR:H/UI:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Gain Privileges Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200597
CVE ID: CVE-2021-29697 State: PUBLISHED Published: 2021-08-02T16:35:26.726390Z Last Updated: 2024-09-16T20:07:15.323Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AC:L/A:N/AV:N/S:U/PR:H/I:N/UI:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Cloud Pak for Security Problem Types: Obtain Information Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could be used in further attacks against the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vuln
gram Container: References: - https://www.ibm.com/support/pages/node/6476940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200598
CVE ID: CVE-2021-29699 State: PUBLISHED Published: 2021-07-15T17:16:06.541902Z Last Updated: 2024-09-16T19:30:03.824Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:A/A:H/AC:L/S:U/I:H/C:H/UI:R/PR:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Docker Problem Types: Gain Access Description: IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. IBM X-Force ID: 200600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6471895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200600
CVE ID: CVE-2021-29700 State: PUBLISHED Published: 2021-10-07T18:06:00.287788Z Last Updated: 2024-09-17T00:05:44.532Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/I:N/PR:L/AC:L/C:L/S:U/UI:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496749 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6496749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200656
CVE ID: CVE-2021-29701 State: PUBLISHED Published: 2022-01-11T16:25:16.923850Z Last Updated: 2024-09-17T04:15:14.426Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AV:N/A:N/PR:L/I:N/UI:N/AC:L/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: Engineering Workflow Management, Rational Team Concert Problem Types: Obtain Information Description: IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/s
e system. IBM X-Force ID: 200657. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6539546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200657
CVE ID: CVE-2021-29702 State: PUBLISHED Published: 2021-06-16T16:15:24.434627Z Last Updated: 2024-09-16T23:51:49.077Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/C:N/PR:N/UI:N/S:U/A:H/AC:L/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Denial of Service Description: Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6463985 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ner: References: - https://www.ibm.com/support/pages/node/6463985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200658 - https://security.netapp.com/advisory/ntap-20210720-0005/
CVE ID: CVE-2021-29703 State: PUBLISHED Published: 2021-06-24T18:45:29.304368Z Last Updated: 2024-09-16T19:04:49.053Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/C:N/AV:N/PR:N/AC:L/I:N/UI:N/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200659. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200659 - https://
https://www.ibm.com/support/pages/node/6466371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200659 - https://security.netapp.com/advisory/ntap-20210720-0006/
CVE ID: CVE-2021-29704 State: PUBLISHED Published: 2021-08-23T16:05:15.611905Z Last Updated: 2024-09-16T20:43:16.216Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/C:H/AV:N/S:U/UI:N/PR:N/AC:H/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Problem Types: Obtain Information Description: IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6482585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200660
CVE ID: CVE-2021-29706 State: PUBLISHED Published: 2021-06-17T15:30:17.652715Z Last Updated: 2024-09-17T00:26:20.268Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/PR:N/AC:L/I:N/S:U/AV:L/C:L/UI:N/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: AIX Problem Types: Denial of Service Description: IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6464369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200663
CVE ID: CVE-2021-29707 State: PUBLISHED Published: 2021-07-19T16:00:26.963327Z Last Updated: 2024-09-16T19:40:32.893Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/C:H/A:H/AV:L/S:U/I:H/PR:N/UI:N/RL:O/RC:C/E:U) Vendors: IBM Products: Power HMC Problem Types: Gain Privileges Description: IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6473347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200879
CVE ID: CVE-2021-29708 State: PUBLISHED Published: 2021-05-25T16:00:17.916256Z Last Updated: 2024-09-16T18:08:42.075Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AC:L/UI:N/S:U/AV:L/A:H/C:H/I:H/PR:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200883
CVE ID: CVE-2021-29711 State: PUBLISHED Published: 2021-07-08T16:10:11.761478Z Last Updated: 2024-09-16T17:33:34.601Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/PR:H/S:U/AV:N/C:N/I:H/UI:N/AC:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: File Manipulation Description: IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade through the CLI interface. IBM X-Force ID: 200965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469941 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200965
CVE ID: CVE-2021-29712 State: PUBLISHED Published: 2021-07-09T16:55:12.083950Z Last Updated: 2024-09-16T16:18:12.850Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/I:L/C:L/UI:R/S:C/PR:N/AC:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 200966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/page
BM X-Force ID: 200966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6468581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200966
CVE ID: CVE-2021-29713 State: PUBLISHED Published: 2021-10-27T16:00:26.464499Z Last Updated: 2024-09-16T16:32:30.155Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/S:C/PR:L/AV:N/UI:R/AC:L/A:N/E:H/RL:O/RC:C) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Rational Team Concert, Engineering Workflow Management Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to
users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6508583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200967
CVE ID: CVE-2021-29714 State: PUBLISHED Published: 2021-08-09T16:05:14.371481Z Last Updated: 2024-09-16T19:19:13.600Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:L/C:N/I:N/A:H/S:U/UI:N/AV:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Content Navigator Problem Types: Denial of Service Description: IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6479397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/200968
CVE ID: CVE-2021-29715 State: PUBLISHED Published: 2021-08-26T19:25:22.764033Z Last Updated: 2024-09-16T16:52:41.114Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:L/PR:N/S:U/I:N/AC:L/C:L/AV:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. IBM X-Force ID: 201018. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6483653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201018
CVE ID: CVE-2021-29716 State: PUBLISHED Published: 2021-12-03T17:00:25.778137Z Last Updated: 2024-09-16T23:51:34.910Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/I:L/PR:H/A:N/C:N/UI:N/AC:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/201087 - https://security.netapp.com/advisory/ntap-20211223-0006/