Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1734 State: PUBLISHED Published: 2018-04-24T14:00:00Z Last Updated: 2024-09-16T20:59:13.684Z Vendors: IBM Products: Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Rhapsody Design Manager, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation, Rational Team Concert, Rational Software Architect Design Manager Problem Types: Obtain Information Description: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody De
Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134915
CVE ID: CVE-2017-1738 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T00:56:32.308Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Gain Privileges Description: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134919 - http://www.ibm.com/support/docview.wss?uid=ibm10716607
CVE ID: CVE-2017-1739 State: PUBLISHED Published: 2018-01-11T17:00:00Z Last Updated: 2024-09-17T03:13:43.492Z Vendors: IBM Products: Cram Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102492 - http://www.ibm.com/support/docview.wss?uid=swg22012366 -
tainer: References: - http://www.securityfocus.com/bid/102492 - http://www.ibm.com/support/docview.wss?uid=swg22012366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134921
CVE ID: CVE-2017-1740 State: PUBLISHED Published: 2018-01-11T17:00:00Z Last Updated: 2024-09-16T19:47:27.829Z Vendors: IBM Products: Cram Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012372 - https://exchange.xforce.ibmcloud.c
ram Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134922 - http://www.securityfocus.com/bid/102498
CVE ID: CVE-2017-1741 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-16T19:36:45.718Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012342 - http://www.securitytra
: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012342 - http://www.securitytracker.com/id/1040485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134931
CVE ID: CVE-2017-1743 State: PUBLISHED Published: 2018-05-04T14:00:00Z Last Updated: 2024-09-16T23:12:00.368Z Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134933 - http://www.ibm.com/support/docview.wss?uid=swg22013601 - http://www.securitytracker.com/id/104089
lnerabilities/134933 - http://www.ibm.com/support/docview.wss?uid=swg22013601 - http://www.securitytracker.com/id/1040890 - http://www.securityfocus.com/bid/104134
CVE ID: CVE-2017-1746 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T20:27:10.937Z Vendors: IBM Products: Tivoli Components Problem Types: Gain Access Description: IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135519 - http://www.ibm.com/support/docview.wss?uid=swg22011308
CVE ID: CVE-2017-1747 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-17T03:42:57.406Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135520 - http://www.ibm.com/support/docview.wss?uid=swg22012992 - http://www.securityfocus.c
bmcloud.com/vulnerabilities/135520 - http://www.ibm.com/support/docview.wss?uid=swg22012992 - http://www.securityfocus.com/bid/103590
CVE ID: CVE-2017-1748 State: PUBLISHED Published: 2018-06-04T17:00:00Z Last Updated: 2024-09-16T19:00:52.157Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Connections Problem Types: Gain Access Description: IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further
hat would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 135521. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/135521
CVE ID: CVE-2017-1749 State: PUBLISHED Published: 2018-08-13T16:00:00Z Last Updated: 2024-09-16T19:04:58.422Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: UrbanCode Deploy Problem Types: File Manipulation Description: IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135522 - https://www.ibm.com/support/docview.wss?uid=swg2C1000374
CVE ID: CVE-2017-1750 State: PUBLISHED Published: 2018-04-25T13:00:00Z Last Updated: 2024-09-17T00:26:55.433Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015712 - https://exchange.xforce.ibmcloud.com/vulner
iner: References: - http://www.ibm.com/support/docview.wss?uid=swg22015712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/135523 - http://www.securityfocus.com/bid/104012
CVE ID: CVE-2017-1751 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T18:29:15.310Z Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Cross-Site Scripting Description: IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135546. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011185 - http://www.securityfocus
- CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011185 - http://www.securityfocus.com/bid/102217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/135546
CVE ID: CVE-2017-1752 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T02:52:55.023Z Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg2C1000376 - http://www.securityfocus.com/bid/104289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/135547
CVE ID: CVE-2017-1753 State: PUBLISHED Published: 2018-08-20T21:00:00Z Last Updated: 2024-09-16T21:57:23.676Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation, Rational Rhapsody Design Manager, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, Rational Quality Manager, Rational Team Concert Problem Types: Gain Access Description: Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the secu
acker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135655 - https://www.ibm.com/support/docview.wss?uid=ibm10713739
CVE ID: CVE-2017-1755 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-16T20:27:52.189Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:H/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Gain Privileges Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 could allow a local attacker to inject commands into malicious files that could be executed by the administrator. IBM X-Force ID: 135855. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135855 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1756 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-17T01:31:39.318Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Business Process Manager Problem Types: Obtain Information Description: IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135856 - http://www.securityfocus.com/bid/103589 - http://www.ibm.com/support/docview.wss?uid=swg22010796
CVE ID: CVE-2017-1757 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-17T03:59:56.827Z Vendors: IBM Products: Security Guardium Problem Types: Data Manipulation Description: IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102300 - http://www.ibm.com/support/docview.wss?uid=swg22011554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/135858
CVE ID: CVE-2017-1758 State: PUBLISHED Published: 2018-02-21T21:00:00Z Last Updated: 2024-09-16T17:03:15.367Z Vendors: IBM Products: Control Center, Financial Transaction Manager, Transformation Extender Advanced Problem Types: Obtain Information Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859. Addit
ld exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/135859 - http://www.securityfocus.com/bid/103130 - http://www.ibm.com/support/docview.wss?uid=swg22013432 - http://www.ibm.com/support/docview.wss?uid=swg22012828 - http://www.ibm.com/support/docview.wss?uid=swg22013375
CVE ID: CVE-2017-1760 State: PUBLISHED Published: 2017-12-11T21:00:00Z Last Updated: 2024-09-16T18:18:02.093Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. IBM X-Force ID: 126454. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126454 - http://www.ibm.com/support/docview.wss?uid=swg22005392
CVE ID: CVE-2017-1761 State: PUBLISHED Published: 2018-02-09T17:00:00Z Last Updated: 2024-09-16T20:21:22.581Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136005 - http://www.ibm.com/support/docview.wss?uid=swg22012416 - http://www.secur
e.xforce.ibmcloud.com/vulnerabilities/136005 - http://www.ibm.com/support/docview.wss?uid=swg22012416 - http://www.securitytracker.com/id/1040333
CVE ID: CVE-2017-1762 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-16T23:00:53.401Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006. Additional Analyst Notes: - CVE Program Container: References:
closure within a trusted session. IBM X-Force ID: 136006. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136006 - http://www.securityfocus.com/bid/103477 - http://www.ibm.com/support/docview.wss?uid=swg22014815
CVE ID: CVE-2017-1764 State: PUBLISHED Published: 2018-04-23T13:00:00Z Last Updated: 2024-09-16T20:06:20.555Z Vendors: IBM Products: Cognos Business Intelligence Problem Types: Obtain Information Description: IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136149 - http://www.ibm.com/support/docview.wss?uid=swg22014202
CVE ID: CVE-2017-1765 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-17T03:19:06.019Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: Business Process Manager Problem Types: Obtain Information Description: IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136150 - http://www.securityfocus.com/bid/103678 - http://www.ibm.com/support/docview.wss?uid=swg22011844 - http://www.securitytra
ttp://www.securityfocus.com/bid/103678 - http://www.ibm.com/support/docview.wss?uid=swg22011844 - http://www.securitytracker.com/id/1040622
CVE ID: CVE-2017-1766 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-16T22:31:13.774Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: IBM Products: Business Process Manager Problem Types: Gain Access Description: Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136151 - http://www.ibm.com/support/docview.wss?uid=swg22011866
CVE ID: CVE-2017-1767 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-17T00:37:06.602Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: Business Process Manager Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012396 - http://w
Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012396 - http://www.securityfocus.com/bid/103679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/136152 - http://www.securitytracker.com/id/1040623
CVE ID: CVE-2017-1768 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-16T23:50:29.779Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/136471 - http://www.securityfocus.com/bid/104493 - http://www.ibm.com/support/doc
ge.xforce.ibmcloud.com/vulnerabilities/136471 - http://www.securityfocus.com/bid/104493 - http://www.ibm.com/support/docview.wss?uid=swg22016515
CVE ID: CVE-2017-1769 State: PUBLISHED Published: 2018-01-24T14:00:00Z Last Updated: 2024-09-17T03:07:50.934Z Vendors: IBM Products: Business Process Manager Problem Types: Gain Access Description: IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/136783 - http://www.securityfocus.com/bid/102777 - http://www.ibm.com/support/docview.wss?uid=swg22011579
CVE ID: CVE-2017-1772 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T22:56:07.179Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: IBM Products: MobileFirst Platform Foundation Problem Types: Cross-Site Scripting Description: IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
usted session. IBM X-Force ID: 136786. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/136786 - http://www.ibm.com/support/docview.wss?uid=swg2C1000369
CVE ID: CVE-2017-1773 State: PUBLISHED Published: 2018-01-31T15:00:00Z Last Updated: 2024-09-16T17:38:15.403Z Vendors: IBM Products: DataPower Gateways Problem Types: Gain Access Description: IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/136817
CVE ID: CVE-2017-1774 State: PUBLISHED Published: 2018-02-26T14:00:00Z Last Updated: 2024-09-17T02:07:10.071Z Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/136818 - http://www.ibm.com/support/docview.wss?uid=swg22013595