Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4509 State: PUBLISHED Published: 2020-06-04T13:35:19.279586Z Last Updated: 2024-09-16T18:44:48.589Z Severity: HIGH (CVSS 7.6 CVSS:3.0/PR:H/UI:N/A:L/S:C/AC:L/I:N/AV:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182
References: - https://www.ibm.com/support/pages/node/6220154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182364
CVE ID: CVE-2020-4510 State: PUBLISHED Published: 2020-07-14T13:10:20.069273Z Last Updated: 2024-09-16T18:34:26.485Z Severity: HIGH (CVSS 7.6 CVSS:3.0/S:C/C:H/AC:L/A:L/PR:H/AV:N/I:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182365. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182
References: - https://www.ibm.com/support/pages/node/6246133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182365
CVE ID: CVE-2020-4511 State: PUBLISHED Published: 2020-07-14T13:10:20.564292Z Last Updated: 2024-09-17T01:05:53.154Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/S:U/C:N/UI:N/AV:N/I:N/A:H/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Denial of Service Description: IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command. IBM X-Force ID: 182366. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182366
CVE ID: CVE-2020-4512 State: PUBLISHED Published: 2020-07-14T13:10:21.000027Z Last Updated: 2024-09-16T20:42:21.110Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/UI:N/A:H/PR:H/AV:N/I:H/AC:L/S:C/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Privileges Description: IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182367
CVE ID: CVE-2020-4513 State: PUBLISHED Published: 2020-07-14T13:10:21.434944Z Last Updated: 2024-09-17T01:00:34.658Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/AV:N/I:L/A:N/PR:N/AC:L/S:C/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182368. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246131 - https://excha
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6246131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182368
CVE ID: CVE-2020-4516 State: PUBLISHED Published: 2020-09-08T14:30:24.140917Z Last Updated: 2024-09-17T04:29:20.976Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/A:N/UI:R/AC:L/S:C/C:L/AV:N/RC:C/RL:O/E:H) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182371. Additional Anal
ionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182371. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6326901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182371
CVE ID: CVE-2020-4520 State: PUBLISHED Published: 2021-05-31T15:10:43.979403Z Last Updated: 2024-09-17T02:52:12.998Z Severity: HIGH (CVSS 7.1 CVSS:3.0/C:H/PR:L/S:U/I:H/UI:R/AV:N/AC:H/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim would execute the code. IBM X-Force ID: 182395. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182395 - https://security.netapp.com/advisory/ntap-20210622-000
5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182395 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2020-4521 State: PUBLISHED Published: 2020-09-15T13:50:24.105005Z Last Updated: 2024-09-16T16:28:11.807Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/A:H/AV:N/I:H/S:U/C:H/UI:N/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in Java. By sending specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 182396. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/supp
ystem. IBM X-Force ID: 182396. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182396
CVE ID: CVE-2020-4522 State: PUBLISHED Published: 2020-09-02T18:25:24.836456Z Last Updated: 2024-09-16T21:02:30.690Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/A:N/AC:L/I:L/C:L/AV:N/S:C/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Quality Manager, Engineering Workflow Management, Rational DOORS Next Generation, Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM
UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6325343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182397
CVE ID: CVE-2020-4524 State: PUBLISHED Published: 2021-01-27T16:15:25.871778Z Last Updated: 2024-09-16T19:09:56.582Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/C:L/AV:N/AC:L/A:N/UI:R/S:C/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Team Concert, Rational Quality Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Rhapsody Design Manager, Engineering Test Management, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Rational Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182434
CVE ID: CVE-2020-4525 State: PUBLISHED Published: 2020-08-04T16:00:26.440002Z Last Updated: 2024-09-17T02:51:30.204Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/A:N/S:C/PR:L/C:L/AC:L/AV:N/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
ed session. IBM X-Force ID: 182435. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182435
CVE ID: CVE-2020-4526 State: PUBLISHED Published: 2020-09-15T13:50:24.589972Z Last Updated: 2024-09-16T20:26:25.356Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/A:N/AV:N/I:L/S:U/C:N/UI:R/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 182436. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18243
eferences: - https://www.ibm.com/support/pages/node/6332589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182436
CVE ID: CVE-2020-4527 State: PUBLISHED Published: 2020-07-20T14:05:25.090814Z Last Updated: 2024-09-16T22:35:10.213Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/AV:N/AC:H/C:H/S:U/I:N/PR:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the Secure flag for the session cookie in TLS mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 182631. Additional Analyst Notes: - CVE Program Container: Ref
cookie and obtain sensitive information. IBM X-Force ID: 182631. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6249981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182631
CVE ID: CVE-2020-4528 State: PUBLISHED Published: 2020-10-06T15:45:16.283675Z Last Updated: 2024-09-16T16:28:02.834Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/UI:N/A:N/I:N/S:C/C:H/AV:L/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Obtain Information Description: IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6333033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182658
CVE ID: CVE-2020-4529 State: PUBLISHED Published: 2020-06-08T12:55:12.661833Z Last Updated: 2024-09-17T04:14:33.871Z Severity: HIGH (CVSS 7.3 CVSS:3.0/UI:N/S:U/AC:L/C:L/PR:N/AV:N/A:L/I:L/RC:C/E:U/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 182713. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220528 - https://exchan
al Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6220528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182713
CVE ID: CVE-2020-4530 State: PUBLISHED Published: 2020-09-15T13:50:25.023912Z Last Updated: 2024-09-17T01:01:53.594Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/S:C/AV:N/I:L/C:L/UI:R/PR:L/RC:C/RL:O/E:H) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 182714. Additional Analyst Not
ty potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 182714. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182714
CVE ID: CVE-2020-4531 State: PUBLISHED Published: 2020-09-25T17:00:18.465970Z Last Updated: 2024-09-16T18:03:32.252Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AV:N/AC:L/UI:N/C:L/I:N/PR:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Business Automation Workflow, Business Process Manager Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182715. Additional Analyst Notes: - CVE Program Co
could be used in further attacks against the system. IBM X-Force ID: 182715. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182715
CVE ID: CVE-2020-4532 State: PUBLISHED Published: 2020-06-17T17:40:12.479710Z Last Updated: 2024-09-16T21:07:34.266Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/UI:N/PR:N/AC:L/C:L/A:N/S:U/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Business Process Manager Express Problem Types: Obtain Information Description: IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182716. Additional Analyst Notes: - CVE Pro
rmation could be used in further attacks against the system. IBM X-Force ID: 182716. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6233276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182716
CVE ID: CVE-2020-4533 State: PUBLISHED Published: 2020-08-10T12:35:16.481655Z Last Updated: 2024-09-17T00:16:45.911Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/PR:N/AV:N/S:C/AC:L/A:N/UI:R/C:L/RC:C/RL:O/E:H) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182717. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
n. IBM X-Force ID: 182717. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6257565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182717
CVE ID: CVE-2020-4534 State: PUBLISHED Published: 2020-08-03T12:35:38.468127Z Last Updated: 2024-09-17T03:03:24.345Z Severity: HIGH (CVSS 7.8 CVSS:3.0/A:H/UI:N/I:H/S:C/PR:L/AV:L/AC:H/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a specially-crafted UNC path, an attacker could exploit this vulnerability to execute arbitrary code with higher privileges. IBM X-Force ID: 182808. Additional Analyst Notes: - CVE Program Con
ty to execute arbitrary code with higher privileges. IBM X-Force ID: 182808. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182808
CVE ID: CVE-2020-4535 State: PUBLISHED Published: 2021-05-11T15:45:17.129360Z Last Updated: 2024-09-16T20:57:34.989Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/S:C/I:L/C:L/AV:N/AC:L/A:N/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: OpenPages GRC Platform Problem Types: Cross-Site Scripting Description: IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451243 -
82906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182906
CVE ID: CVE-2020-4536 State: PUBLISHED Published: 2021-05-11T15:45:17.801106Z Last Updated: 2024-09-17T01:46:05.482Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: OpenPages GRC Platform Problem Types: Obtain Information Description: IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451239 - https://exchange.xforce.ibmcloud.c
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182907
CVE ID: CVE-2020-4539 State: PUBLISHED Published: 2020-08-10T12:35:16.901986Z Last Updated: 2024-09-17T02:41:06.810Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/PR:N/AV:N/S:C/AC:L/UI:R/C:L/A:N/E:H/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6257575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/182914
CVE ID: CVE-2020-4541 State: PUBLISHED Published: 2020-08-10T12:35:17.424955Z Last Updated: 2024-09-17T04:05:04.506Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/UI:R/A:N/I:L/PR:N/AV:N/S:C/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183039. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 183039. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6257577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183039
CVE ID: CVE-2020-4542 State: PUBLISHED Published: 2020-08-04T16:00:26.903038Z Last Updated: 2024-09-16T19:25:35.799Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/UI:R/S:C/PR:L/A:N/I:L/AC:L/C:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 183046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
ed session. IBM X-force ID: 183046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183046
CVE ID: CVE-2020-4544 State: PUBLISHED Published: 2021-01-08T20:40:23.147853Z Last Updated: 2024-09-17T00:41:58.315Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/S:U/PR:L/AV:N/I:N/AC:L/UI:N/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Engineering Workflow Management, Rational Collaborative Lifecycle Management, Rational Quality Manager, Engineering Test Management, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Team Concert, Rational Rhapsody Model Manager, Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when
nformation Description: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183189
CVE ID: CVE-2020-4545 State: PUBLISHED Published: 2020-09-04T13:35:16.983480Z Last Updated: 2024-09-16T22:40:12.952Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AC:L/A:H/UI:R/AV:L/S:U/I:H/PR:N/C:H/E:U/RC:C/RL:O) Vendors: IBM Products: Aspera Connect Problem Types: Gain Access Description: IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190. Additional Analyst Notes: - CVE Program Container: References: - https://www
code on the system. IBM X-Force ID: 183190. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6326537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183190