Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-35106 State: PUBLISHED Published: 2025-02-07T00:00:00.000Z Last Updated: 2025-02-11T15:17:00.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ez-net.co.kr/new_2012/customer/download_view.php?cid=&sid=&goods=&cate=&q=&seq=233 - https://ez-net.co.kr/new_2012/product/view.php?cid=461&sid=467&q=%C7%C3%B7%B9%C5%B8&seq=3479&page= - https://gist.github.com/laskdj
net.co.kr/new_2012/product/view.php?cid=461&sid=467&q=%C7%C3%B7%B9%C5%B8&seq=3479&page= - https://gist.github.com/laskdjlaskdj12/571db73f18be1da1271fa1eb09f488de
CVE ID: CVE-2024-35108 State: PUBLISHED Published: 2024-05-15T02:03:21.810Z Last Updated: 2025-02-13T15:54:03.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FirstLIF/cms/blob/main/1.md
CVE ID: CVE-2024-35109 State: PUBLISHED Published: 2024-05-15T02:03:23.635Z Last Updated: 2025-02-13T15:54:03.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FirstLIF/cms/blob/main/2.md
CVE ID: CVE-2024-35110 State: PUBLISHED Published: 2024-05-17T08:00:44.953Z Last Updated: 2025-02-13T15:54:04.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/68
CVE ID: CVE-2024-35111 State: PUBLISHED Published: 2025-01-25T13:29:55.296Z Last Updated: 2025-01-27T17:30:46.205Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Control Center Problem Types: CWE-209 Description: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174806
CVE ID: CVE-2024-35112 State: PUBLISHED Published: 2025-01-25T13:31:25.755Z Last Updated: 2025-01-27T17:30:11.832Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Control Center Problem Types: CWE-80 Description: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174794
CVE ID: CVE-2024-35113 State: PUBLISHED Published: 2025-01-25T13:32:39.872Z Last Updated: 2025-01-27T17:29:43.139Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Control Center Problem Types: CWE-548 Description: IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through a directory listing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174796
CVE ID: CVE-2024-35114 State: PUBLISHED Published: 2025-01-25T13:33:25.352Z Last Updated: 2025-01-27T17:05:10.986Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Control Center Problem Types: CWE-204 Description: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174842
CVE ID: CVE-2024-35116 State: PUBLISHED Published: 2024-06-28T18:20:50.152Z Last Updated: 2024-08-02T03:07:46.479Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Problem Types: CWE-789 Description: IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7157387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/290335 - https://www.ibm.com/support/pages/node/7158071
CVE ID: CVE-2024-35117 State: PUBLISHED Published: 2024-12-11T01:32:32.066Z Last Updated: 2025-01-27T15:52:51.420Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-312 Description: IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the system tracing log files that could be obtained by a privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7165392
CVE ID: CVE-2024-35118 State: PUBLISHED Published: 2024-08-29T15:20:02.246Z Last Updated: 2024-08-29T15:38:39.100Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MaaS360 Problem Types: CWE-798 Description: IBM MaaS360 for Android 6.31 through 8.60 is using hard coded credentials that can be obtained by a user with physical access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/290341
CVE ID: CVE-2024-35119 State: PUBLISHED Published: 2024-06-30T16:36:37.299Z Last Updated: 2024-08-02T03:07:46.455Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-209 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: 290342. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159052 - https://exchange.xf
ulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/290342
CVE ID: CVE-2024-35122 State: PUBLISHED Published: 2025-01-24T17:27:26.745Z Last Updated: 2025-09-29T15:10:26.137Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: IBM Products: i Problem Types: CWE-266 Description: IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access the target file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7178317
CVE ID: CVE-2024-35124 State: PUBLISHED Published: 2024-08-13T11:14:40.227Z Last Updated: 2024-08-13T13:07:10.798Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: OpenBMC Problem Types: CWE-288 Description: A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7163195 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/290674
CVE ID: CVE-2024-35133 State: PUBLISHED Published: 2024-08-29T16:39:43.913Z Last Updated: 2024-09-21T09:58:17.795Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: IBM Products: Security Verify Access, Security Verify Access Docker Problem Types: CWE-601 Description: IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow
to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7166712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/291026
CVE ID: CVE-2024-35134 State: PUBLISHED Published: 2025-01-25T14:05:45.345Z Last Updated: 2025-01-27T15:01:41.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Analytics Content Hub Problem Types: CWE-209 Description: IBM Analytics Content Hub 2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172787
CVE ID: CVE-2024-35136 State: PUBLISHED Published: 2024-08-14T17:36:09.003Z Last Updated: 2025-11-04T16:12:19.835Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-943 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) federated server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain non default conditions. IBM X-Force ID: 291307. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7165341 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/7165341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/291307
CVE ID: CVE-2024-35137 State: PUBLISHED Published: 2024-06-28T15:33:11.156Z Last Updated: 2025-11-03T21:54:50.236Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-258 Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292413
CVE ID: CVE-2024-35138 State: PUBLISHED Published: 2025-02-04T20:38:34.306Z Last Updated: 2025-08-27T21:13:00.474Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Container Problem Types: CWE-352 Description: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182386
CVE ID: CVE-2024-35139 State: PUBLISHED Published: 2024-06-28T15:42:04.309Z Last Updated: 2025-11-03T21:54:51.694Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-276 Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. IBM X-Force ID: 292415. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292415
CVE ID: CVE-2024-35140 State: PUBLISHED Published: 2024-05-31T16:53:08.654Z Last Updated: 2025-11-03T21:54:53.151Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-295 Description: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292416
CVE ID: CVE-2024-35141 State: PUBLISHED Published: 2024-12-19T01:10:05.711Z Last Updated: 2025-11-03T21:54:54.603Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-250 Description: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155356
CVE ID: CVE-2024-35142 State: PUBLISHED Published: 2024-05-31T16:57:37.135Z Last Updated: 2025-11-03T21:54:56.068Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-250 Description: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292418
CVE ID: CVE-2024-35143 State: PUBLISHED Published: 2024-08-04T13:03:10.154Z Last Updated: 2024-08-05T13:57:36.060Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: IBM Products: Planning Analytics Local Problem Types: CWE-306 Description: IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 292420. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7157110 - h
420. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7157110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292420
CVE ID: CVE-2024-35144 State: PUBLISHED Published: 2025-01-25T14:24:56.824Z Last Updated: 2025-01-27T15:00:50.153Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-540 Description: IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174953
CVE ID: CVE-2024-35145 State: PUBLISHED Published: 2025-01-25T14:21:59.951Z Last Updated: 2025-02-12T20:01:14.830Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-79 Description: IBM Maximo Application Suite 9.0.0 - Monitor Component is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174956
CVE ID: CVE-2024-35146 State: PUBLISHED Published: 2024-11-06T14:16:35.115Z Last Updated: 2024-11-06T15:12:57.373Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-79 Description: IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages
in a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174946
CVE ID: CVE-2024-35148 State: PUBLISHED Published: 2025-01-25T14:28:16.353Z Last Updated: 2025-02-12T20:01:14.707Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-89 Description: IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7174952
CVE ID: CVE-2024-35150 State: PUBLISHED Published: 2025-01-25T14:31:10.563Z Last Updated: 2025-02-12T20:01:14.546Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Maximo Application Suite Problem Types: CWE-117 Description: IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7180057
CVE ID: CVE-2024-35151 State: PUBLISHED Published: 2024-08-22T10:12:55.160Z Last Updated: 2024-08-22T12:57:30.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-288 Description: IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7165959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292638
CVE ID: CVE-2024-35152 State: PUBLISHED Published: 2024-08-14T17:40:25.318Z Last Updated: 2025-11-04T16:12:20.834Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-789 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due to improper memory allocation. IBM X-Force ID: 292639. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7165342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
eferences: - https://www.ibm.com/support/pages/node/7165342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292639
CVE ID: CVE-2024-35153 State: PUBLISHED Published: 2024-06-27T17:19:04.529Z Last Updated: 2024-08-02T03:07:46.474Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-79 Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 292640. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/s
292640. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292640
CVE ID: CVE-2024-35154 State: PUBLISHED Published: 2024-07-09T21:57:32.820Z Last Updated: 2024-08-02T03:07:46.791Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-250 Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/
: 292641. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292641
CVE ID: CVE-2024-35155 State: PUBLISHED Published: 2024-06-28T17:40:37.828Z Last Updated: 2024-08-02T03:07:46.739Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Problem Types: CWE-209 Description: IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158059 - https://exchange.xforce.ibmcloud.com/v
Program Container: References: - https://www.ibm.com/support/pages/node/7158059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292765
CVE ID: CVE-2024-35156 State: PUBLISHED Published: 2024-06-28T18:12:21.696Z Last Updated: 2024-08-02T03:07:46.944Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Problem Types: CWE-209 Description: IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292766. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/292766