Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0710 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T18:30:53.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73494 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC76901 - http://www.securityfocus.com/bid/78282 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781 - http://www-01.ibm.com/supp
www.securityfocus.com/bid/78282 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC76899 - http://www-01.ibm.com/support/docview.wss?uid=swg21588090 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC76902 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15078
CVE ID: CVE-2012-0711 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T18:30:54.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842 - http://www.securityfocu
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842 - http://www.securityfocus.com/bid/77826 - http://www-01.ibm.com/support/docview.wss?uid=swg21588093 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC80728 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC80729 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC80561
CVE ID: CVE-2012-0712 State: PUBLISHED Published: 2012-03-20T20:00:00 Last Updated: 2024-08-06T18:30:54.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73496 - http://www-01.ibm.com/support/docview.wss?uid=swg21588098 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14450 - http://www-01.ibm.com/sup
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14450 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81380 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81379 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81837
CVE ID: CVE-2012-0713 State: PUBLISHED Published: 2012-08-24T10:00:00 Last Updated: 2024-08-06T18:30:54.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC81462 - http://www.securityfocus.com/bid/53873
CVE ID: CVE-2012-0714 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T18:30:54.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85179 - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud
Container: References: - http://osvdb.org/85179 - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73534 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV16085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV16497
CVE ID: CVE-2012-0715 State: PUBLISHED Published: 2012-03-02T19:00:00 Last Updated: 2024-08-06T18:30:54.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73587 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV16174 - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IV16174
CVE ID: CVE-2012-0716 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T18:30:54.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PM53132 - http://www.ibm.com/support/docview.wss?uid=swg21595172 - http://www.securityfocus.com/bid/52722
CVE ID: CVE-2012-0717 State: PUBLISHED Published: 2012-06-20T10:00:00Z Last Updated: 2024-09-16T17:15:18.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21595172 - http://www.ibm.com/support/docview.wss?uid=swg1PM52351
CVE ID: CVE-2012-0718 State: PUBLISHED Published: 2020-02-18T17:02:49 Last Updated: 2024-08-06T18:38:13.449Z Vendors: IBM Products: Tivoli Endpoint Manager Problem Types: Default Configureation Description: IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74038
CVE ID: CVE-2012-0719 State: PUBLISHED Published: 2012-03-22T01:00:00 Last Updated: 2024-08-06T18:38:13.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48352 - http://www.securityfocus.com/bid/52514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74039 - http://www-01.ibm.com/support/docview.wss?uid=swg21587743
CVE ID: CVE-2012-0720 State: PUBLISHED Published: 2012-06-20T10:00:00 Last Updated: 2024-08-06T18:38:13.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21595172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74044 - http://www.ibm.com/support/docview.wss?uid=swg1PM52274
CVE ID: CVE-2012-0721 State: REJECTED Published: 2018-07-16T15:00:00 Last Updated: 2018-07-16T14:57:01 Description: No description available.
CVE ID: CVE-2012-0722 State: REJECTED Published: 2013-01-11T22:00:00Z Last Updated: 2024-09-16T18:59:39.778Z Description: No description available.
CVE ID: CVE-2012-0723 State: PUBLISHED Published: 2012-07-30T19:00:00 Last Updated: 2024-08-06T18:38:13.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV22696 - http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV22694 - http://www.ibm.com/support/docview.wss?uid=isg1IV22697 - https:
http://www.ibm.com/support/docview.wss?uid=isg1IV22694 - http://www.ibm.com/support/docview.wss?uid=isg1IV22697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74134 - http://www.securitytracker.com/id?1027315 - http://www.ibm.com/support/docview.wss?uid=isg1IV22695 - http://www.ibm.com/support/docview.wss?uid=isg1IV22693
CVE ID: CVE-2012-0724 State: PUBLISHED Published: 2012-04-06T20:00:00 Last Updated: 2024-08-06T18:38:13.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html - http://www.adobe.com/support/security/bulletins/apsb12-07.html - http://secunia.com/advisories/48732 - https://oval.cisecurity.o
ww.adobe.com/support/security/bulletins/apsb12-07.html - http://secunia.com/advisories/48732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15533 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-0725 State: PUBLISHED Published: 2012-04-06T20:00:00 Last Updated: 2024-08-06T18:38:13.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html - http://www.adobe.com/support/security/bulletins/apsb12-07.html - http://secunia.com/advisories/48732 - https://oval.cisecurity.o
ww.adobe.com/support/security/bulletins/apsb12-07.html - http://secunia.com/advisories/48732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14628 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-0726 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:38:13.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO15761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74303 - http://www.securitytracker.com/id?1026939 - http://www.ibm.com/support/docview.wss?uid=swg1IO16036 - http://www.
74303 - http://www.securitytracker.com/id?1026939 - http://www.ibm.com/support/docview.wss?uid=swg1IO16036 - http://www.securityfocus.com/bid/53043 - http://www-01.ibm.com/support/docview.wss?uid=swg21591272 - http://www.ibm.com/support/docview.wss?uid=swg1IO16035
CVE ID: CVE-2012-0727 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T18:38:13.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV17963 - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.
01.ibm.com/support/docview.wss?uid=swg1IV17963 - http://secunia.com/advisories/50551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74306 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE ID: CVE-2012-0728 State: PUBLISHED Published: 2012-09-10T17:00:00 Last Updated: 2024-08-06T18:38:13.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74307 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV17964
https://exchange.xforce.ibmcloud.com/vulnerabilities/74307 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV17964 - http://secunia.com/advisories/50551 - http://www-01.ibm.com/support/docview.wss?uid=swg21610081
CVE ID: CVE-2012-0729 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74366 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/b
xchange.xforce.ibmcloud.com/vulnerabilities/74366 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0730 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74370 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid
hange.xforce.ibmcloud.com/vulnerabilities/74370 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0731 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74371
CVE ID: CVE-2012-0732 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74389 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www
lities/74389 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0733 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74374 - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53
.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0734 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74557 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0735 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74558 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0736 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74559 - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0737 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:38:13.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74560 - http://secunia.com/advisories/48967 - http://www.ibm.com/support/docview.wss?uid=swg21592188 - http://secunia.com/advisories/48968 - http://www.securityfocus.com/bid/53247
CVE ID: CVE-2012-0738 State: PUBLISHED Published: 2012-12-28T11:00:00 Last Updated: 2024-08-06T18:38:14.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74578 - http://www-01.ibm.com/support/docview.wss?uid=swg21620759 - http://www-01.ibm.com/support/docview.wss?uid=swg21620760
CVE ID: CVE-2012-0740 State: PUBLISHED Published: 2012-04-22T18:00:00 Last Updated: 2024-08-06T18:38:13.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24032290 - http://www.ibm.com/support/docview.wss?uid=swg1IO16016 - http://www.securitytracker.com/id?1026880 - http://www-01.ibm.com/support/docview.wss?uid=swg24032291 - http://www.ibm
- http://www.securitytracker.com/id?1026880 - http://www-01.ibm.com/support/docview.wss?uid=swg24032291 - http://www.ibm.com/support/docview.wss?uid=swg1IO14508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74610
CVE ID: CVE-2012-0741 State: PUBLISHED Published: 2012-12-28T11:00:00 Last Updated: 2024-08-06T18:38:13.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21620759 - http://www-01.ibm.com/support/docview.wss?uid=swg21620760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74142
CVE ID: CVE-2012-0742 State: PUBLISHED Published: 2012-04-09T20:00:00 Last Updated: 2024-08-06T18:38:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74641 - http://www-01.ibm.com/support/docview.wss?uid=swg1OA38586