Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3069 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T10:35:55.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21681213 - http://secunia.com/advisories/59688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/948
iew.wss?uid=swg21681213 - http://secunia.com/advisories/59688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94839
CVE ID: CVE-2014-3070 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T10:35:55.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93777 - http://www.securityfocus.com/bid/69296 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249 - http://www-01.ib
- http://www.securityfocus.com/bid/69296 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765
CVE ID: CVE-2014-3071 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:35:55.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93786 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50453 - http://secunia.com/advisories/59267 - http://www-01.ibm.com/support/docview.wss?
m/support/docview.wss?uid=swg1JR50453 - http://secunia.com/advisories/59267 - http://www-01.ibm.com/support/docview.wss?uid=swg21677719
CVE ID: CVE-2014-3072 State: PUBLISHED Published: 2014-08-12T14:00:00 Last Updated: 2024-08-06T10:35:55.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93787
CVE ID: CVE-2014-3073 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:35:55.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93790 - http://secunia.com/advisories/59438 - http://www-01.ibm.com/support/docview.wss?uid=swg21676699 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV61563
CVE ID: CVE-2014-3074 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T10:35:55.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68296 - http://www.securityfocus.com/archive/1/532689/100/0/threaded - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-30
689/100/0/threaded - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3074/ - http://www.ibm.com/support/docview.wss?uid=isg1IV60940 - http://seclists.org/fulldisclosure/2014/Jul/31 - http://www.securitytracker.com/id/1030504 - http://aix.software.ibm.com/aix/efixes/security/malloc_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV61311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93816 - http://packetstormsecurity.com/files/127390/IBM-AIX-Runtime-Linker-Privilege-Escalation.html - http://www.ibm.com/support/docview.wss?uid=isg1IV60935 - http://www.ibm.com/support/docview.wss?uid=isg1IV61315 - http://secunia.com/advisori
pport/docview.wss?uid=isg1IV60935 - http://www.ibm.com/support/docview.wss?uid=isg1IV61315 - http://secunia.com/advisories/59344 - http://www.ibm.com/support/docview.wss?uid=isg1IV61313 - http://www.ibm.com/support/docview.wss?uid=isg1IV61314
CVE ID: CVE-2014-3075 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T10:35:56.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93817 - http://www-01.ibm.com/support/docview.wss?uid=swg21679979 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50092
CVE ID: CVE-2014-3076 State: PUBLISHED Published: 2014-08-11T22:00:00 Last Updated: 2024-08-06T10:35:55.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unspecified JSP diagnostic page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60614 - http://www.securitytracker.com/id/1030666 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50760 - http://www-01.ibm.com/support/docview.wss?uid=swg21679976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93822
CVE ID: CVE-2014-3077 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2024-08-06T10:35:55.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93906
CVE ID: CVE-2014-3079 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T10:35:55.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682627 - http://www-01.ibm.com/support/docview.wss?uid=swg24038045 - http://secunia.com/advisories/60709 - http://secunia.com/advisories/61071 - http://www.
rt/docview.wss?uid=swg24038045 - http://secunia.com/advisories/60709 - http://secunia.com/advisories/61071 - http://www.securityfocus.com/bid/69643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93912 - http://www-01.ibm.com/support/docview.wss?uid=swg21681449
CVE ID: CVE-2014-3080 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T10:35:55.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to kvm.cgi or (2) the key parameter to avctalert.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html - http://www.securityfocus.com/bid/68777 - http://www.exploit-db.com/exploits/34132/ - ht
e-Execution-File-Read-XSS.html - http://www.securityfocus.com/bid/68777 - http://www.exploit-db.com/exploits/34132/ - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 - http://seclists.org/fulldisclosure/2014/Jul/113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93929
CVE ID: CVE-2014-3081 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T10:35:55.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html - http://www.exploit-db.com/exploits/34132/ - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 - http://seclists.org/fulldisclosure/2014/Jul/113 - https://excha
m/support/entry/portal/docdisplay?lndocid=migr-5095983 - http://seclists.org/fulldisclosure/2014/Jul/113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93930
CVE ID: CVE-2014-3083 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T10:35:55.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93954 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI17768 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249
CVE ID: CVE-2014-3084 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T10:35:55.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.
ecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV61274 - http://www.securitytracker.com/id/1030780 - http://www-01.ibm.com/support/docview.wss?uid=swg21681020 - http://secunia.com/advisories/60453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93955 - http://secunia.com/advisories/60408
CVE ID: CVE-2014-3085 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T10:35:55.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html - http://www.exploit-db.com/exploits/34132/ - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 - https://exchange.xforce.ibmcloud.com/
34132/ - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94091
CVE ID: CVE-2014-3086 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T10:35:55.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a security manager. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680333 - http://www.securityfocus.com/bid/69183 - http://secunia.com/advisories/61577 - http://secunia.com/advisories/59680 - https://exchange.xforc
focus.com/bid/69183 - http://secunia.com/advisories/61577 - http://secunia.com/advisories/59680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94097 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV62634 - http://www-01.ibm.com/support/docview.wss?uid=swg21686383 - http://www-01.ibm.com/support/docview.wss?uid=swg21680334 - http://secunia.com/advisories/60622 - http://secunia.com/advisories/60081 - http://secunia.com/advisories/61640 - http://www-01.ibm.com/support/docview.wss?uid=swg21686824 - http://secunia.com/advisories/60317
CVE ID: CVE-2014-3087 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T10:35:56.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94112 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616
https://exchange.xforce.ibmcloud.com/vulnerabilities/94112 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616 - http://secunia.com/advisories/60757 - http://secunia.com/advisories/60755 - http://www-01.ibm.com/support/docview.wss?uid=swg21679726 - http://secunia.com/advisories/60752
CVE ID: CVE-2014-3088 State: PUBLISHED Published: 2014-07-01T20:00:00 Last Updated: 2024-08-06T10:35:56.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: stconf.nsf in IBM Sametime Meeting Server 8.5.1 relies on the client to validate the file format used in wAttach?OpenForm multipart/form-data POST requests, which allows remote authenticated users to bypass intended upload restrictions by modifying the Content-Type header and file extension, as demonstrated by replacing a text/plain .txt upload with an application/octet-stream .exe upload. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127294 - http://packetstormsecurity.c
Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127294 - http://packetstormsecurity.com/files/127829/IBM-Sametime-Meet-Server-8.5-Arbitrary-File-Upload.html - http://linux.oracle.com/errata/ELSA-2014-0747.html - http://www.securityfocus.com/bid/68291
CVE ID: CVE-2014-3089 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T10:35:55.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21681554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94255 - http://www.securityfocus.com/bi
cview.wss?uid=swg21681554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94255 - http://www.securityfocus.com/bid/69300
CVE ID: CVE-2014-3090 State: PUBLISHED Published: 2014-09-23T20:00:00 Last Updated: 2024-08-06T10:35:55.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94256 - http://www.securityfocus.com/bid/69964 - http://www.securitytracker.com/id/1030883 - http://www-01.ibm.com/support/docview.w
://www.securityfocus.com/bid/69964 - http://www.securitytracker.com/id/1030883 - http://www-01.ibm.com/support/docview.wss?uid=swg21677285
CVE ID: CVE-2014-3091 State: PUBLISHED Published: 2014-10-13T01:00:00 Last Updated: 2024-08-06T10:35:55.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.1.x and 7.2.x allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94257 - http://www.securityfocus.com/bid/70379 - http://www-01.ibm.com/support/docview.wss?uid=swg21686480
CVE ID: CVE-2014-3092 State: PUBLISHED Published: 2014-09-12T01:00:00 Last Updated: 2024-08-06T10:35:55.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682787 - https://exch
t Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94258
CVE ID: CVE-2014-3093 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T10:35:55.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation process, (4) environment checks, (5) powervc-ldap-config, (6) powervc-restore, and (7) powervc-diag, which allows local users to obtain sensitive information by entering a ps command or reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020242 - http://www.securityfocus.com/bid/69437 - https://exchange.xforce.ibmcl
01.ibm.com/support/docview.wss?uid=nas8N1020242 - http://www.securityfocus.com/bid/69437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94259
CVE ID: CVE-2014-3094 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T10:35:55.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21683296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94260 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02593 - http://secunia.com/advisories/58616 - http://www
ies/94260 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02593 - http://secunia.com/advisories/58616 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02291 - http://www.securityfocus.com/bid/69550 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02594 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02592 - http://www-01.ibm.com/support/docview.wss?uid=swg21681631 - http://secunia.com/advisories/60845
CVE ID: CVE-2014-3095 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T10:35:56.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted UNION clause in a subquery of a SELECT statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21681623 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02644 - http://www-01.ibm.com/support/docview.wss?uid=swg21683297 -
http://www-01.ibm.com/support/docview.wss?uid=swg1IT02644 - http://www-01.ibm.com/support/docview.wss?uid=swg21683297 - http://www.securityfocus.com/bid/69546 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94263 - http://secunia.com/advisories/58725 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02643 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02433 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT02646 - http://secunia.com/advisories/60845
CVE ID: CVE-2014-3096 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T10:35:56.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94264
CVE ID: CVE-2014-3097 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:35:56.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64511 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64349 - http://www-01.ibm.com/support/docview.wss
?uid=swg1IV64511 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64349 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64512 - http://www-01.ibm.com/support/docview.wss?uid=swg21684852 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64376 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64509 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64324 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64497 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64501 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94265 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64325 - http://www-01.ibm.co
ce.ibmcloud.com/vulnerabilities/94265 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64325 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV64494