Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1933 State: PUBLISHED Published: 2019-05-01T15:15:20.882757Z Last Updated: 2024-09-17T02:47:06.785Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/S:C/I:L/PR:L/A:N/C:L/UI:R/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153177. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid
ID: 153177. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153177 - http://www.securityfocus.com/bid/108191
CVE ID: CVE-2018-1934 State: PUBLISHED Published: 2019-12-20T16:25:24.653564Z Last Updated: 2024-09-16T18:19:01.060Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:R/A:N/C:N/S:U/PR:N/I:L/AC:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Business Intelligence Problem Types: Gain Access Description: IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153179. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1142626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1531
References: - https://www.ibm.com/support/pages/node/1142626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153179
CVE ID: CVE-2018-1935 State: PUBLISHED Published: 2018-12-06T14:00:00Z Last Updated: 2024-09-17T01:01:51.214Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Connections Problem Types: Obtain Information Description: IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153315 - http://www.securityfocus.com/bid/106134
CVE ID: CVE-2018-1936 State: PUBLISHED Published: 2019-04-03T13:50:29.611286Z Last Updated: 2024-09-16T23:40:48.561Z Severity: HIGH (CVSS 8.4 CVSS:3.0/PR:N/S:U/A:H/UI:N/I:H/AC:L/C:H/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: DB2, Db2 Problem Types: Gain Privileges Description: IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10741481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153316
CVE ID: CVE-2018-1937 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-17T02:36:57.031Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153317. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10871766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153317 - http://www.securityfocus.com/bid/107300
CVE ID: CVE-2018-1938 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T18:03:16.403Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Obtain Information Description: IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153318 - http://www.securityfocus.com/bid/107299 - https://www.ibm.com/support/docview.wss?uid=ibm10871770
CVE ID: CVE-2018-1939 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T18:14:30.293Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Gain Access Description: IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks
d appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 153319. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107302 - https://www.ibm.com/support/docview.wss?uid=ibm10871652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153319
CVE ID: CVE-2018-1941 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-16T16:32:32.656Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Campaign Problem Types: Gain Privileges Description: IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating access permissions. IBM X-Force ID: 153382. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10743115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153382
CVE ID: CVE-2018-1943 State: PUBLISHED Published: 2019-04-08T14:50:37.897124Z Last Updated: 2024-09-16T18:29:25.910Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/UI:R/S:C/C:L/AC:L/I:L/PR:L/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Private Problem Types: Gain Access Description: IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijack
conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 153385. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10871656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153385 - http://www.securityfocus.com/bid/107828
CVE ID: CVE-2018-1944 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-17T03:13:42.405Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 153386. Additional Analyst Notes: - CVE Program Container: References: - https:/
ption of internal data. IBM X-Force ID: 153386. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153386
CVE ID: CVE-2018-1945 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-16T18:03:25.268Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Gain Access Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 153387. Additiona
ack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 153387. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153387
CVE ID: CVE-2018-1946 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-16T17:23:45.265Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 153388. Additional Analy
t it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 153388. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153388
CVE ID: CVE-2018-1947 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-16T18:19:32.793Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Cross-Site Scripting Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153427. Additional Analyst Notes: - CVE Program
ing to credentials disclosure within a trusted session. IBM X-Force ID: 153427. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153427 - https://www.ibm.com/support/docview.wss?uid=ibm10872142
CVE ID: CVE-2018-1948 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-17T03:08:30.416Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the coo
s link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 153428. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153428 - https://www.ibm.com/support/docview.wss?uid=ibm10872142
CVE ID: CVE-2018-1949 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-17T03:23:07.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153429. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153429 - https://www.ibm.com/suppo
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153429 - https://www.ibm.com/support/docview.wss?uid=ibm10872142
CVE ID: CVE-2018-1950 State: PUBLISHED Published: 2019-02-21T17:00:00Z Last Updated: 2024-09-17T02:07:02.020Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss
rce ID: 153430. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153430
CVE ID: CVE-2018-1951 State: PUBLISHED Published: 2019-01-04T15:00:00Z Last Updated: 2024-09-16T22:31:11.659Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Cross-Site Scripting Description: IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153494. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
-Force ID: 153494. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153494 - http://www.securityfocus.com/bid/106460 - https://www.ibm.com/support/docview.wss?uid=ibm10792081
CVE ID: CVE-2018-1952 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T19:14:32.213Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153495. Additional Analyst Notes: - CVE Program Contain
credentials disclosure within a trusted session. IBM X-Force ID: 153495. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153495 - http://www.securityfocus.com/bid/107435
CVE ID: CVE-2018-1956 State: PUBLISHED Published: 2019-01-14T14:00:00Z Last Updated: 2024-09-16T22:30:16.492Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 153628. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10794615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153628 - http://www.securityfocus.com
docview.wss?uid=ibm10794615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153628 - http://www.securityfocus.com/bid/106554
CVE ID: CVE-2018-1957 State: PUBLISHED Published: 2018-12-10T14:00:00Z Last Updated: 2024-09-16T20:06:15.192Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequest#authenticate() API when an unprotected URI is accessed. IBM X-Force ID: 153629. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106203 - https://www.ibm.com/support/do
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106203 - https://www.ibm.com/support/docview.wss?uid=ibm10744247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153629
CVE ID: CVE-2018-1959 State: PUBLISHED Published: 2019-01-24T17:00:00Z Last Updated: 2024-09-16T20:17:16.017Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 153633. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106726 - https://exchange.xf
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153633 - https://www.ibm.com/support/docview.wss?uid=ibm10796380
CVE ID: CVE-2018-1961 State: PUBLISHED Published: 2019-04-29T16:35:17.556246Z Last Updated: 2024-09-16T21:08:09.250Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/AC:L/UI:N/PR:N/A:N/C:L/S:U/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Emptoris Contract Management Problem Types: Obtain Information Description: IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153657
CVE ID: CVE-2018-1962 State: PUBLISHED Published: 2019-02-04T21:00:00Z Last Updated: 2024-09-16T21:04:35.310Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pressed. The lack of proper session termination may allow attackers with local access to login into a closed browser session. IBM X-Force ID: 153658. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106854 - http://www.ibm.com/support/docview.ws
: - CVE Program Container: References: - http://www.securityfocus.com/bid/106854 - http://www.ibm.com/support/docview.wss?uid=ibm10796380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153658
CVE ID: CVE-2018-1967 State: PUBLISHED Published: 2019-01-14T14:00:00Z Last Updated: 2024-09-17T03:07:17.514Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Cross-Site Scripting Description: IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153748. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm
153748. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10794615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153748 - http://www.securityfocus.com/bid/106554
CVE ID: CVE-2018-1968 State: PUBLISHED Published: 2019-07-11T19:55:18.576898Z Last Updated: 2024-09-16T17:18:25.795Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/UI:N/C:L/AC:L/AV:N/I:N/S:U/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10958077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153749
CVE ID: CVE-2018-1969 State: PUBLISHED Published: 2019-01-14T14:00:00Z Last Updated: 2024-09-17T02:36:54.560Z Severity: CRITICAL (CVSS 9 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10794615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153750 - http://www.securityfocus.com/bid
iew.wss?uid=ibm10794615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153750 - http://www.securityfocus.com/bid/106554
CVE ID: CVE-2018-1970 State: PUBLISHED Published: 2019-02-04T21:00:00Z Last Updated: 2024-09-17T02:07:00.624Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153751 - http://www.ibm.com/sup
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153751 - http://www.ibm.com/support/docview.wss?uid=ibm10796380
CVE ID: CVE-2018-1973 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T17:39:21.308Z Severity: HIGH (CVSS 7.2 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Gain Privileges Description: IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through the members functionality. IBM X-Force ID: 153914. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10788339 - http://www.securityfocus.com/bid/106281 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
cview.wss?uid=ibm10788339 - http://www.securityfocus.com/bid/106281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153914