Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1106 State: PUBLISHED Published: 2017-06-28T18:00:00Z Last Updated: 2024-09-16T18:07:51.657Z Vendors: IBM Products: Cram Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120744. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99306 - http://www.ibm.com/support/docview.wss?uid=swg22004580 - https://excha
ences: - http://www.securityfocus.com/bid/99306 - http://www.ibm.com/support/docview.wss?uid=swg22004580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120744
CVE ID: CVE-2017-1107 State: PUBLISHED Published: 2019-06-19T13:30:19.654326Z Last Updated: 2024-09-17T03:03:10.975Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/C:L/I:N/PR:L/AV:N/UI:N/A:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Marketing Platform Problem Types: Obtain Information Description: IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120906 - http://www.sec
m.com/support/docview.wss?uid=ibm10887815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120906 - http://www.securityfocus.com/bid/108918
CVE ID: CVE-2017-1110 State: PUBLISHED Published: 2017-08-28T20:00:00Z Last Updated: 2024-09-16T21:08:05.057Z Vendors: IBM Products: Cram Social Program Management Problem Types: Obtain Information Description: IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/120915
CVE ID: CVE-2017-1113 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-17T04:09:11.479Z Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121151. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99352 - http://www.ibm.com/support/docview.wss?uid=swg22004611 - https://exchange.xforce.ibm
//www.securityfocus.com/bid/99352 - http://www.ibm.com/support/docview.wss?uid=swg22004611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121151 - http://www.securitytracker.com/id/1038912
CVE ID: CVE-2017-1114 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-17T03:34:20.991Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Campaign Problem Types: Cross-Site Scripting Description: IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121152. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729773 - https://ex
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121152
CVE ID: CVE-2017-1115 State: PUBLISHED Published: 2018-09-07T16:00:00Z Last Updated: 2024-09-16T17:38:48.866Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Campaign Problem Types: Gain Access Description: IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121153 - https://www.ibm.com/support/docview.wss?uid=ibm10
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121153 - https://www.ibm.com/support/docview.wss?uid=ibm10729769
CVE ID: CVE-2017-1116 State: PUBLISHED Published: 2018-04-27T15:00:00Z Last Updated: 2024-09-17T01:51:17.697Z Vendors: IBM Products: Campaign Problem Types: Obtain Information Description: IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide information useful for an authenticated user to conduct other attacks. IBM X-Force ID: 121154. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121154 - http://www.securityfocus.com/bid/104011
CVE ID: CVE-2017-1117 State: PUBLISHED Published: 2017-06-21T18:00:00 Last Updated: 2024-08-05T13:25:17.207Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99136 - http://www.ibm.com/support/docview.wss?uid=swg22001468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121155
CVE ID: CVE-2017-1118 State: PUBLISHED Published: 2017-08-02T17:00:00Z Last Updated: 2024-09-17T02:57:28.548Z Vendors: IBM Products: WebSphere MQ Problem Types: Denial of Service Description: IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configured security policy. IBM X-Force ID: 121156. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121156 - http://www.securityfocus.com/bid/100021 - http://www.ibm.com/support/docview.wss?uid=swg22006580
CVE ID: CVE-2017-1119 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T19:36:48.953Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Marketing Operations Problem Types: Obtain Information Description: IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attacks against the affected system. IBM X-Force ID: 121171. Additional Analyst Notes: - CVE Program Container: Reference
ttacks against the affected system. IBM X-Force ID: 121171. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121171 - http://www.ibm.com/support/docview.wss?uid=ibm10738519
CVE ID: CVE-2017-1120 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-05T13:25:17.359Z Vendors: IBM Corporation Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000152. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038146 - http://www.securityfocus.com/bid/97075 - http://www.ibm.com/support/docview.wss?uid=swg22
curitytracker.com/id/1038146 - http://www.securityfocus.com/bid/97075 - http://www.ibm.com/support/docview.wss?uid=swg22000152
CVE ID: CVE-2017-1121 State: PUBLISHED Published: 2017-02-13T22:00:00 Last Updated: 2024-08-05T13:25:17.230Z Vendors: IBM Corporation Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743 Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037806 - http://www.securityfocus.com/bid/96164 - http://www.ibm.com/
: References: - http://www.securitytracker.com/id/1037806 - http://www.securityfocus.com/bid/96164 - http://www.ibm.com/support/docview.wss?uid=swg21997743
CVE ID: CVE-2017-1122 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-05T13:25:17.263Z Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038347 - http://www.ibm.com/support/docview.wss?uid=swg21997868 - http://www.securityfocus.com/bid/97995
CVE ID: CVE-2017-1124 State: PUBLISHED Published: 2017-03-07T17:00:00 Last Updated: 2024-08-05T13:25:17.096Z Vendors: IBM Corporation Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998053 - http://www.securityfocus.com/bid/96536
CVE ID: CVE-2017-1125 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T13:25:17.195Z Vendors: IBM Products: Cognos Business Intelligence Problem Types: Gain Access Description: IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121340 - http://www.securityfocus.com/bid/98945
CVE ID: CVE-2017-1126 State: PUBLISHED Published: 2017-10-03T17:00:00Z Last Updated: 2024-09-17T02:57:03.847Z Vendors: IBM Products: Integration Bus Problem Types: Obtain Information Description: IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101104 - http://www.ibm.com/support/docview.wss?uid=swg22008470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121341
CVE ID: CVE-2017-1127 State: PUBLISHED Published: 2017-02-08T19:00:00 Last Updated: 2024-08-05T13:25:17.150Z Vendors: IBM Corporation Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96019 - http://www.ibm.com/support/docview.wss?uid=swg21996645
CVE ID: CVE-2017-1128 State: PUBLISHED Published: 2017-02-08T19:00:00 Last Updated: 2024-08-05T13:25:17.484Z Vendors: IBM Corporation Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96017 - http://www.ibm.com/support/docview.wss?uid=swg21996645
CVE ID: CVE-2017-1129 State: PUBLISHED Published: 2017-09-05T21:00:00Z Last Updated: 2024-09-16T16:38:43.778Z Vendors: IBM Products: Lotus Expeditor, Notes Problem Types: Denial of Service Description: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42602/ - http://www.ibm.com/support/docview.wss?uid=swg21999385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121370 - http://www.ibm.com/support/docview.wss?uid=swg22002103
CVE ID: CVE-2017-1130 State: PUBLISHED Published: 2017-09-05T21:00:00Z Last Updated: 2024-09-16T21:58:13.936Z Vendors: IBM Products: Notes Problem Types: Denial of Service Description: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121371 - http://www.ibm.com/support/docview.wss?uid=swg21999384 - https://www.exploit-db.com/exploits/42604/ - http://www.securityfocus.com/bid/100632
CVE ID: CVE-2017-1131 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:25:17.392Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99227 - http://www.ibm.com/support/docview.wss?uid=swg22004270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121375
CVE ID: CVE-2017-1132 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:25:17.137Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121418. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121418 - http://www.ibm.com/su
://www.securityfocus.com/bid/99233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/121418 - http://www.ibm.com/support/docview.wss?uid=swg22004199
CVE ID: CVE-2017-1133 State: PUBLISHED Published: 2017-03-07T17:00:00 Last Updated: 2024-08-05T13:25:17.274Z Vendors: IBM Corporation Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999534 - http://www.securityfocus.com/bid/97239
CVE ID: CVE-2017-1134 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T13:25:17.200Z Vendors: IBM Corporation Products: Tivoli System Automation for Multiplatforms Problem Types: Gain Privileges Description: IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96764 - http://www.ibm.com/support/docview.wss?uid=swg21998459 - http://www.securitytracker.com/id/1038389
CVE ID: CVE-2017-1137 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-05T13:25:17.235Z Vendors: IBM Corporation Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998469 - http://www.securitytracker.com/id/1038464
CVE ID: CVE-2017-1140 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-05T13:25:17.228Z Vendors: IBM Products: Business Process Manager Advanced Problem Types: Cross-Site Scripting Description: IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/121905 - http://www.securityfocus.com/bid/97322 - http://www.ibm.com/support/docview.wss?uid
bmcloud.com/vulnerabilities/121905 - http://www.securityfocus.com/bid/97322 - http://www.ibm.com/support/docview.wss?uid=swg21999133
CVE ID: CVE-2017-1141 State: PUBLISHED Published: 2017-04-28T17:00:00 Last Updated: 2024-08-05T13:25:17.198Z Vendors: IBM Corporation Products: IBM Insights Foundation for Energy Problem Types: Obtain Information Description: IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages. IBM X-Force ID: 121907. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002620 - http://www.securityfocus.com/bid/98161
CVE ID: CVE-2017-1142 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-05T13:25:17.310Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Obtain Information Description: IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM Reference #: 1998874. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?ui
e #: 1998874. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998874 - http://www.securityfocus.com/bid/97081
CVE ID: CVE-2017-1143 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-05T13:25:17.200Z Vendors: IBM Corporation Products: Kenexa LCMS Premier on Cloud Problem Types: Obtain Information Description: IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998874 - http://www.securityfocus.com/bid/9707
Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998874 - http://www.securityfocus.com/bid/97079
CVE ID: CVE-2017-1144 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-16T23:26:34.057Z Vendors: IBM Products: Integration Bus Problem Types: Denial of Service Description: IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/122033 - http://www.ibm.com/support/docview.wss?uid=swg22005383 - http://www.securityfocus.com/bid/99365
CVE ID: CVE-2017-1145 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T13:25:17.194Z Vendors: IBM Corporation Products: WebSphere MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999672 - http://www.securityfocus.com/bid/96759 - http://www.securitytracker.com/id/1038068
CVE ID: CVE-2017-1146 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T13:25:17.294Z Vendors: IBM Corporation Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999736. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96761 - http://www.ibm.com/support/docview.wss?uid=swg21999736
CVE ID: CVE-2017-1147 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-16T23:21:42.808Z Vendors: IBM Products: OpenPages GRC Platform Problem Types: Cross-Site Scripting Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122200. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/122200 - http://www.ibm.com/suppo
ww.securityfocus.com/bid/101663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/122200 - http://www.ibm.com/support/docview.wss?uid=swg21997685
CVE ID: CVE-2017-1148 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-17T00:40:58.458Z Vendors: IBM Products: OpenPages GRC Platform Problem Types: Obtain Information Description: IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be used in further attacks against the system. IBM X-Force ID: 122201. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/122201 - http://www.ibm.com/support/docview.wss?uid=swg22009717