Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22331 State: PUBLISHED Published: 2022-04-01T16:45:27.360960Z Last Updated: 2024-09-16T16:28:41.198Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/AV:N/S:U/UI:N/AC:L/PR:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: SterlingPartner Engagement Manager Problem Types: Obtain Information Description: IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6568299 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/6568299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219130
CVE ID: CVE-2022-22332 State: PUBLISHED Published: 2022-04-01T16:45:29.548477Z Last Updated: 2024-09-16T20:17:37.776Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/PR:N/AC:H/UI:N/AV:N/S:U/A:L/C:L/I:L/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: Gain Privileges Description: IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6568301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219131
CVE ID: CVE-2022-22333 State: PUBLISHED Published: 2022-02-23T19:45:13.635818Z Last Updated: 2024-09-16T23:15:30.064Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/A:H/S:U/I:N/C:N/AC:L/PR:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling Secure Proxy Problem Types: Denial of Service Description: IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 21
r positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219133
CVE ID: CVE-2022-22334 State: PUBLISHED Published: 2022-07-31T17:30:23.478598Z Last Updated: 2024-09-17T03:54:26.416Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/S:U/AC:H/I:L/A:N/C:L/AV:N/PR:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219391
CVE ID: CVE-2022-22336 State: PUBLISHED Published: 2022-02-23T19:45:15.270495Z Last Updated: 2024-09-17T04:09:01.969Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/A:H/S:U/C:N/I:N/AC:L/PR:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling Secure Proxy Problem Types: Denial of Service Description: IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219395
CVE ID: CVE-2022-22337 State: PUBLISHED Published: 2023-01-04T17:50:06.533Z Last Updated: 2025-04-10T13:50:10.729Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: CWE-200 Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219507
CVE ID: CVE-2022-22338 State: PUBLISHED Published: 2023-01-04T17:41:40.371Z Last Updated: 2025-04-10T13:52:34.340Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: CWE-89 Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/n
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219510
CVE ID: CVE-2022-22339 State: PUBLISHED Published: 2022-04-08T15:30:21.703877Z Last Updated: 2024-09-17T01:00:45.906Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/UI:N/C:L/S:U/A:L/AV:N/I:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 219736. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6565099 - https://exchange.xforce.ibmcloud.
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6565099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/219736
CVE ID: CVE-2022-22344 State: PUBLISHED Published: 2022-03-14T16:45:21.409045Z Last Updated: 2024-09-16T20:47:58.154Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/I:L/UI:N/AC:H/S:U/AV:N/C:L/A:N/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Copy Data Management Problem Types: Gain Access Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 220038 Additional Analyst Notes: - CVE Program Container: References:
e poisoning or session hijacking. IBM X-Force ID: 220038 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220038
CVE ID: CVE-2022-22345 State: PUBLISHED Published: 2022-04-27T15:20:41.328470Z Last Updated: 2024-09-16T17:02:39.589Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/C:L/AV:N/AC:L/I:L/PR:H/S:C/A:N/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220041. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574453 - https://exc
ional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220041
CVE ID: CVE-2022-22346 State: PUBLISHED Published: 2022-03-14T17:00:22.782052Z Last Updated: 2024-09-16T20:38:06.821Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/I:L/UI:R/AC:L/PR:N/C:N/AV:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Gain Access Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220048. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562855 - https://exchange.xforc
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220048
CVE ID: CVE-2022-22348 State: PUBLISHED Published: 2022-03-14T17:00:24.258848Z Last Updated: 2024-09-16T19:31:22.889Z Severity: MEDIUM (CVSS 4 CVSS:3.0/C:L/A:N/AV:L/I:L/S:U/UI:N/PR:N/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force I
ld then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220139
CVE ID: CVE-2022-22349 State: PUBLISHED Published: 2022-02-24T17:10:14.818932Z Last Updated: 2024-09-16T22:15:14.368Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/PR:L/AC:L/A:N/AV:N/C:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling External Authentication Server Problem Types: Gain Access Description: IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558928 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6558928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220144
CVE ID: CVE-2022-22350 State: PUBLISHED Published: 2022-03-02T16:35:17.039824Z Last Updated: 2024-09-17T01:26:08.927Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/UI:N/A:H/I:N/C:N/PR:N/AC:L/S:U/AV:L/RC:C/RL:O/E:U) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 220394. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6560390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220394
CVE ID: CVE-2022-22351 State: PUBLISHED Published: 2022-03-07T16:55:17.127823Z Last Updated: 2024-09-16T23:31:18.019Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:N/C:N/I:N/A:H/S:C/AV:A/PR:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: AIX, VIOS Problem Types: Denial of Service Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted host. IBM X-Force ID: 220396 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6561275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220396
CVE ID: CVE-2022-22352 State: PUBLISHED Published: 2023-01-04T17:00:11.456Z Last Updated: 2025-04-10T14:02:30.329Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: CWE-79 Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220398. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
session. IBM X-Force ID: 220398. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6852443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220398
CVE ID: CVE-2022-22353 State: PUBLISHED Published: 2022-03-14T17:00:25.751510Z Last Updated: 2024-09-16T16:22:27.140Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/A:N/C:H/AC:H/PR:L/S:U/I:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Big SQL on Cloud Pak for Data Problem Types: Obtain Information Description: IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6563021 - https://exchange.xforc
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6563021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220480
CVE ID: CVE-2022-22354 State: PUBLISHED Published: 2022-03-14T16:45:22.864779Z Last Updated: 2024-09-17T03:08:31.357Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/S:U/UI:N/AC:L/AV:L/I:N/A:H/PR:N/C:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Copy Data Management, Spectrum Protect Plus Problem Types: Denial of Service Description: IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the Admin Console to become unresponsive. IBM X-Force ID: 220485. Additional Analyst Notes: - CVE Program Container: Referen
Admin Console to become unresponsive. IBM X-Force ID: 220485. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6562479 - https://www.ibm.com/support/pages/node/6562989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220485
CVE ID: CVE-2022-22355 State: PUBLISHED Published: 2022-04-05T16:45:21.335870Z Last Updated: 2024-09-17T00:56:53.642Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/A:L/AV:N/AC:L/C:N/PR:N/S:U/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6564711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220486
CVE ID: CVE-2022-22356 State: PUBLISHED Published: 2022-04-05T16:45:22.946689Z Last Updated: 2024-09-16T18:49:50.435Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:H/PR:L/S:U/I:N/UI:N/A:N/AV:N/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Obtain Information Description: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6564711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220487
CVE ID: CVE-2022-22358 State: PUBLISHED Published: 2022-07-19T16:25:17.821716Z Last Updated: 2024-09-17T01:06:34.180Z Severity: HIGH (CVSS 7.1 CVSS:3.0/UI:N/PR:L/AV:N/AC:L/I:N/A:L/S:U/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling Partner Engagement Manager, Sterling Partner Engagement Manager on Cloud Problem Types: Gain Access Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651. Additional Analyst Notes: - CVE Program Container: Refe
information or consume memory resources. IBM X-Force ID: 220651. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220651
CVE ID: CVE-2022-22359 State: PUBLISHED Published: 2022-07-19T16:25:19.483092Z Last Updated: 2024-09-16T20:12:32.392Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/AC:L/A:N/S:U/C:N/UI:R/PR:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling Partner Engagement Manager on Cloud, Sterling Partner Engagement Manager Problem Types: Gain Access Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220652. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/
te trusts. IBM X-Force ID: 220652. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220652
CVE ID: CVE-2022-22360 State: PUBLISHED Published: 2022-07-19T16:25:20.916902Z Last Updated: 2024-09-17T03:07:59.037Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:L/AV:N/UI:N/I:H/AC:H/A:H/S:U/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling Partner Engagement Manager, Sterling Partner Engagement Manager on Cloud Problem Types: Gain Privileges Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 220782. Additional Analyst Notes:
and could result in in granting permission to unauthorized resources. IBM X-Force ID: 220782. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220782
CVE ID: CVE-2022-22361 State: PUBLISHED Published: 2022-05-31T15:45:13.828869Z Last Updated: 2024-09-16T19:30:44.287Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:N/S:U/C:N/A:N/AC:L/AV:N/UI:R/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Gain Access Description: IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 18.0.0.1, IBM Business Automation Workflow containers V21.0.1 - V21.0.3 20.0.0.1 through 20.0.0.2, IBM Business Process Manager 8.6.0.0 through 8.6.0.201803, and 8.5.0.0 through 8.5.0.201706 is vulnerable to cross-site request forgery whi
s Manager 8.6.0.0 through 8.6.0.201803, and 8.5.0.0 through 8.5.0.201706 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6590411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220784
CVE ID: CVE-2022-22363 State: PUBLISHED Published: 2025-01-07T16:07:00.578Z Last Updated: 2025-01-07T16:58:21.218Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Controller, Cognos Controller Problem Types: CWE-209 Description: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179163
CVE ID: CVE-2022-22364 State: PUBLISHED Published: 2024-05-03T18:14:34.420Z Last Updated: 2024-08-03T03:14:55.079Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-350 Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact
submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 220903. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220903
CVE ID: CVE-2022-22365 State: PUBLISHED Published: 2022-05-20T16:20:19.096307Z Last Updated: 2024-09-17T03:23:33.278Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/I:L/A:L/S:U/AV:N/UI:N/C:L/AC:H/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames. IBM X-Force ID: 220904. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6587947 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/6587947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/220904
CVE ID: CVE-2022-22366 State: PUBLISHED Published: 2022-07-01T18:00:24.317157Z Last Updated: 2024-09-16T19:55:50.353Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/C:H/UI:N/I:N/A:N/AV:N/PR:H/AC:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 22106. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6600065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221006
CVE ID: CVE-2022-22367 State: PUBLISHED Published: 2022-07-01T18:00:46.781561Z Last Updated: 2024-09-17T00:56:53.167Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/A:N/I:N/UI:N/C:L/AC:L/S:U/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6600067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221008