Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1439 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T17:43:48.264Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139589. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 139589. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139589 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1440 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T23:55:45.637Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139595. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 139595. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139595
CVE ID: CVE-2018-1441 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-16T18:39:34.243Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: IBM Products: Monitoring Problem Types: Cross-Site Scripting Description: IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139597. Additional Analyst Notes: - CVE Program Container: References: - https:/
thin a trusted session. IBM X-Force ID: 139597. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139597 - http://www.ibm.com/support/docview.wss?uid=swg22013557
CVE ID: CVE-2018-1442 State: PUBLISHED Published: 2018-03-08T16:00:00Z Last Updated: 2024-09-17T00:31:34.176Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:R) Vendors: IBM Products: Monitoring Problem Types: Gain Access Description: IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139598. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103368 - https://exchange.xforce.ibmcloud.com/vulnerabili
gram Container: References: - http://www.securityfocus.com/bid/103368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139598 - http://www.ibm.com/support/docview.wss?uid=swg22013500
CVE ID: CVE-2018-1443 State: PUBLISHED Published: 2018-03-08T16:00:00Z Last Updated: 2024-09-16T19:01:09.668Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:L/AC:L/AV:L/C:L/I:L/PR:N/S:U/UI:N) Vendors: IBM Products: Security Access Manager, Tivoli Federated Identity Manager Problem Types: Gain Privileges Description: An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.) This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim users password. IBM X-Force ID: 139754. Additional
to authenticating as a different user without knowledge of the victim users password. IBM X-Force ID: 139754. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040454 - http://www.securitytracker.com/id/1040455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139754 - http://www.ibm.com/support/docview.wss?uid=swg22014160 - http://www.securityfocus.com/bid/103365 - http://www.ibm.com/support/docview.wss?uid=swg22014161
CVE ID: CVE-2018-1444 State: PUBLISHED Published: 2018-03-14T00:00:00Z Last Updated: 2024-09-17T01:41:58.118Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040475 - https://exchange.xforce.ibmcl
Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139906 - https://www.ibm.com/support/docview.wss?uid=swg22014392
CVE ID: CVE-2018-1445 State: PUBLISHED Published: 2018-04-17T15:00:00Z Last Updated: 2024-09-16T20:23:01.048Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139907. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/139907 - http://www.securitytracker.com/id/1040647 - http://www-01.ib
tps://exchange.xforce.ibmcloud.com/vulnerabilities/139907 - http://www.securitytracker.com/id/1040647 - http://www-01.ibm.com/support/docview.wss?uid=swg22015407
CVE ID: CVE-2018-1447 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T01:50:34.113Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Spectrum Protect, Spectrum Protect Snapshot, Spectrum Protect for Virtual Environments, Spectrum Protect for Space Management Problem Types: Obtain Information Description: The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new pass
sswords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015066 - http://www.ibm.com/support/docview.wss?uid=swg22014957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/139972 - http://www.ibm.com/support/docview.wss?uid=swg22015071 - http://www.securityfocus.com/bid/104511 - http://www.securitytracker.com/id/1041012 - http://www.ibm.com/support/docview.wss?uid=swg22014669
CVE ID: CVE-2018-1448 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-17T03:32:39.003Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:H/AC:L/AV:L/C:N/I:H/PR:N/S:U/UI:N) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140043 - h
http://www.ibm.com/support/docview.wss?uid=swg22014388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140043 - http://www.securityfocus.com/bid/103535
CVE ID: CVE-2018-1449 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-16T19:24:42.398Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016181 - http://www.securitytracker.com/id/1041004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140044
CVE ID: CVE-2018-1450 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T02:06:11.386Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016181 - http://www.securitytracker.com/id/1041004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140045
CVE ID: CVE-2018-1451 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-16T19:10:42.084Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016181 - http://www.securitytracker.com/id/1041004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140046
CVE ID: CVE-2018-1452 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T01:41:55.913Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: File Manipulation Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140047. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016181 - http://www.securitytracker.com/id/1041004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140047
CVE ID: CVE-2018-1453 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-16T16:48:32.997Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Manager Problem Types: Gain Access Description: IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22013617 - http://www.securitytracker.com/id/1041383 - https://exchange.xforce.ibmcloud.c
com/support/docview.wss?uid=swg22013617 - http://www.securitytracker.com/id/1041383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140055
CVE ID: CVE-2018-1454 State: PUBLISHED Published: 2018-06-05T15:00:00Z Last Updated: 2024-09-16T20:52:12.549Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089. Additional Analyst Notes: - CVE Program Container: References: - http://www
e middle techniques. IBM X-Force ID: 140089. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140089 - http://www.ibm.com/support/docview.wss?uid=swg22015222
CVE ID: CVE-2018-1455 State: PUBLISHED Published: 2018-08-15T15:00:00Z Last Updated: 2024-09-16T19:25:00.237Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Application Dependency Discovery Manager Problem Types: Gain Access Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22016659 - https://exc
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22016659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140090 - http://www.securityfocus.com/bid/105135
CVE ID: CVE-2018-1456 State: PUBLISHED Published: 2018-06-06T17:00:00 Last Updated: 2024-08-05T03:59:39.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140091 - http://www.ibm.com/support/docview.wss?uid=swg22016795
CVE ID: CVE-2018-1457 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T16:58:51.269Z Severity: HIGH (CVSS 8.1 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Problem Types: Bypass Security Description: An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140208 - http://www.ibm.com/support/docview.wss?uid=swg22017436 - http://www.securityfocus.com/bid/104573
CVE ID: CVE-2018-1458 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-16T23:56:55.142Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. IBM X-Force ID: 140209. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22016624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140209 - http://www.securityt
support/docview.wss?uid=swg22016624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140209 - http://www.securitytracker.com/id/1041230
CVE ID: CVE-2018-1459 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-16T22:25:30.196Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140210 - http://www.securitytracker.com/id/1041005 - http://www.ibm.com/support/docview.wss?uid=swg22016142
CVE ID: CVE-2018-1460 State: PUBLISHED Published: 2018-06-15T14:00:00Z Last Updated: 2024-09-16T16:43:45.618Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: PureData System for Analytics Problem Types: Gain Privileges Description: IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140211 - https://www.tenable.com/security/research/tra-2018-13 - http://www.ibm.com/sup
rce.ibmcloud.com/vulnerabilities/140211 - https://www.tenable.com/security/research/tra-2018-13 - http://www.ibm.com/support/docview.wss?uid=swg22015701 - http://www.securityfocus.com/bid/104486
CVE ID: CVE-2018-1461 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-16T20:27:43.382Z Vendors: IBM Products: Spectrum Virtualize Software, Storwize V5000, Storwize V3500, Storwize V7000 (2076), Storwize V3700, FlashSystem V9000, SAN Volume Controller, Spectrum Virtualize for Public Cloud Problem Types: Cross-Site Scripting Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend
ite scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140362. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140362 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1462 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-17T01:51:33.890Z Vendors: IBM Products: Storwize V3700, Spectrum Virtualize Software, SAN Volume Controller, Storwize V5000, Storwize V7000 (2076), FlashSystem V9000, Storwize V3500, Spectrum Virtualize for Public Cloud Problem Types: Denial of Service Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to including deleting files or causing a denial of service. IBM
user to access system files they should not have access to including deleting files or causing a denial of service. IBM X-Force ID: 140363. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140363 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1463 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-16T16:52:50.494Z Vendors: IBM Products: Storwize V5000, Spectrum Virtualize Software, Storwize V3700, Spectrum Virtualize for Public Cloud, SAN Volume Controller, Storwize V7000 (2076), Storwize V3500, FlashSystem V9000 Problem Types: Obtain Information Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Forc
d user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140368 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1464 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-16T20:17:34.402Z Vendors: IBM Products: Storwize V5000, Spectrum Virtualize Software, Storwize V3500, Storwize V7000 (2076), Storwize V3700, Spectrum Virtualize for Public Cloud, SAN Volume Controller, FlashSystem V9000 Problem Types: Obtain Information Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395. Addition
d user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/140395 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE ID: CVE-2018-1465 State: PUBLISHED Published: 2018-05-17T21:00:00Z Last Updated: 2024-09-16T18:14:09.942Z Vendors: IBM Products: Storwize V3500, SAN Volume Controller, Spectrum Virtualize Software, Spectrum Virtualize for Public Cloud, Storwize V7000 (2076), FlashSystem V9000, Storwize V5000, Storwize V3700 Problem Types: Obtain Information Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396. Addi
d user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 - http://www.securityfocus.com/bid/104349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/140396 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 - http://www.ibm.com/support/docview.wss?uid=ssg1S1012283