Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4039 State: PUBLISHED Published: 2019-05-23T14:05:15.446631Z Last Updated: 2024-09-17T01:16:15.846Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/S:U/UI:N/AV:L/A:H/C:N/AC:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156163
CVE ID: CVE-2019-4040 State: PUBLISHED Published: 2019-01-31T16:00:00Z Last Updated: 2024-09-17T02:12:08.268Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: i Problem Types: Cross-Site Scripting Description: IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106811 - http://www.ibm.com/support/docview.wss?uid=ibm1
ogram Container: References: - http://www.securityfocus.com/bid/106811 - http://www.ibm.com/support/docview.wss?uid=ibm10869384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156164
CVE ID: CVE-2019-4043 State: PUBLISHED Published: 2019-04-02T13:20:33.975241Z Last Updated: 2024-09-16T16:32:40.540Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/PR:L/AC:L/S:U/C:H/UI:N/I:N/A:L/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm1087
39. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10874238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156239 - http://www.securityfocus.com/bid/107778
CVE ID: CVE-2019-4045 State: PUBLISHED Published: 2019-04-08T14:50:38.084656Z Last Updated: 2024-09-17T01:56:35.278Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/S:U/UI:N/AC:L/C:N/A:N/PR:L/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Business Automation Workflow Problem Types: Gain Access Description: IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870494 - http
nal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156241
CVE ID: CVE-2019-4046 State: PUBLISHED Published: 2019-03-25T18:15:16.964097Z Last Updated: 2024-09-17T00:41:26.180Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/PR:N/A:H/I:N/C:N/UI:N/S:U/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Denial of Service Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM X-Force ID: 156242. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10869570 - https://exchange.xforc
- CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10869570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156242 - http://www.securityfocus.com/bid/107623
CVE ID: CVE-2019-4047 State: PUBLISHED Published: 2019-04-29T16:35:17.708450Z Last Updated: 2024-09-16T20:02:42.912Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/C:L/S:U/PR:L/A:N/I:N/AC:L/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156243 - http://www.securit
m/support/docview.wss?uid=ibm10882262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156243 - http://www.securityfocus.com/bid/108103
CVE ID: CVE-2019-4048 State: PUBLISHED Published: 2019-06-06T00:35:18.759822Z Last Updated: 2024-09-16T17:59:00.803Z Severity: LOW (CVSS 2.1 CVSS:3.0/C:L/S:U/UI:N/A:N/I:N/PR:L/AV:P/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156311
CVE ID: CVE-2019-4049 State: PUBLISHED Published: 2019-08-20T18:25:26.381956Z Last Updated: 2024-09-17T03:47:44.113Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/PR:N/I:N/UI:N/AV:L/S:U/AC:L/A:H/C:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156398
CVE ID: CVE-2019-4051 State: PUBLISHED Published: 2019-04-08T14:50:38.126320Z Last Updated: 2024-09-16T18:24:22.136Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/UI:N/AV:N/A:N/PR:N/I:N/AC:L/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879395 - https://
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156542 - http://www.securityfocus.com/bid/107841
CVE ID: CVE-2019-4052 State: PUBLISHED Published: 2019-03-22T18:50:21.417030Z Last Updated: 2024-09-16T23:56:41.057Z Severity: HIGH (CVSS 8.2 CVSS:3.0/C:H/I:L/S:U/AV:N/PR:N/AC:L/UI:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10874248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156544 - http://www.securityfocus.com/bid/107559
CVE ID: CVE-2019-4054 State: PUBLISHED Published: 2019-07-17T14:05:20.897077Z Last Updated: 2024-09-17T03:32:31.310Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/PR:N/AV:L/C:L/A:N/I:N/UI:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10957139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156563
CVE ID: CVE-2019-4055 State: PUBLISHED Published: 2019-04-19T16:20:15.989741Z Last Updated: 2024-09-17T04:14:16.419Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/I:N/C:N/AV:N/A:H/UI:N/PR:N/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function. IBM X-Force ID: 156564. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156564 - http://www.securityfocus.com/bid/108027
CVE ID: CVE-2019-4056 State: PUBLISHED Published: 2019-06-06T00:35:18.806739Z Last Updated: 2024-09-16T17:34:20.207Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/I:L/PR:L/AV:N/A:N/C:N/S:U/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: File Manipulation Description: IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156565
CVE ID: CVE-2019-4057 State: PUBLISHED Published: 2019-07-01T15:05:37.482843Z Last Updated: 2024-09-16T18:09:24.227Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/S:U/A:H/I:H/UI:N/PR:H/C:H/AC:L/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880735 - https://exchange.
otes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156567
CVE ID: CVE-2019-4058 State: PUBLISHED Published: 2019-05-20T17:25:23.427016Z Last Updated: 2024-09-16T23:25:41.446Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/C:N/PR:L/AC:L/S:U/UI:N/I:H/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Bypass Security Description: IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10881996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156570
CVE ID: CVE-2019-4059 State: PUBLISHED Published: 2019-02-15T20:00:00Z Last Updated: 2024-09-17T02:20:40.715Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational ClearCase Problem Types: Obtain Information Description: IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/156583
CVE ID: CVE-2019-4061 State: PUBLISHED Published: 2019-02-27T22:00:00Z Last Updated: 2024-09-17T03:34:21.480Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: BigFix Platform Problem Types: Obtain Information Description: IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/156869 - http://www.securityfocus.com/bid/107189 - http://www.i
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/156869 - http://www.securityfocus.com/bid/107189 - http://www.ibm.com/support/docview.wss?uid=ibm10870242 - http://www.rapid7.com/db/modules/auxiliary/gather/ibm_bigfix_sites_packages_enum
CVE ID: CVE-2019-4062 State: PUBLISHED Published: 2019-07-30T13:25:14.836298Z Last Updated: 2024-09-16T17:02:45.487Z Severity: HIGH (CVSS 7.1 CVSS:3.0/C:H/AV:N/UI:N/S:U/A:L/I:N/PR:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyst's Notebook Problem Types: Obtain Information Description: IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10881746 - htt
ional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10881746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157007
CVE ID: CVE-2019-4063 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-17T04:18:59.985Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/157008 - http://www.securityfocus.com/bid/10731
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/157008 - http://www.securityfocus.com/bid/107310 - https://www.ibm.com/support/docview.wss?uid=ibm10874234
CVE ID: CVE-2019-4066 State: PUBLISHED Published: 2019-06-07T14:40:19.505550Z Last Updated: 2024-09-17T03:12:30.507Z Severity: HIGH (CVSS 8.8 CVSS:3.0/S:U/A:H/AV:N/PR:L/AC:L/UI:N/C:H/I:H/RC:C/RL:O/E:U) Vendors: IBM Products: Intelligent Operations Center Problem Types: Gain Access Description: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID management issues and result in code execution. IBM X-Force ID: 157011. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157011
CVE ID: CVE-2019-4067 State: PUBLISHED Published: 2019-06-07T14:40:19.556987Z Last Updated: 2024-09-16T17:24:10.565Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/PR:N/UI:N/AC:H/C:H/S:U/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Intelligent Operations Center Problem Types: Obtain Information Description: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15
ces: - https://www.ibm.com/support/docview.wss?uid=ibm10880213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157012
CVE ID: CVE-2019-4068 State: PUBLISHED Published: 2019-06-07T14:40:19.598640Z Last Updated: 2024-09-16T23:55:59.706Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/AV:N/PR:N/AC:H/UI:N/C:H/S:U/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Intelligent Operations Center Problem Types: Obtain Information Description: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system. IBM X-Force ID: 157013. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157013
CVE ID: CVE-2019-4069 State: PUBLISHED Published: 2019-06-07T14:40:19.638355Z Last Updated: 2024-09-17T03:43:01.451Z Severity: HIGH (CVSS 8 CVSS:3.0/A:H/S:U/C:H/AC:L/UI:R/AV:N/PR:L/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: Intelligent Operations Center Problem Types: Gain Access Description: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Force ID: 157014. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157014
CVE ID: CVE-2019-4070 State: PUBLISHED Published: 2019-06-07T14:40:19.677199Z Last Updated: 2024-09-17T02:42:24.869Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/AV:N/PR:L/C:L/UI:R/AC:L/I:L/RL:O/RC:C/E:H) Vendors: IBM Products: Intelligent Operations Center Problem Types: Cross-Site Scripting Description: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157015. Additional Analyst Notes: - CVE Program Container: References: - https://www.
a trusted session. IBM X-Force ID: 157015. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157015
CVE ID: CVE-2019-4071 State: PUBLISHED Published: 2019-05-09T15:10:15.559296Z Last Updated: 2024-09-16T22:40:47.327Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/I:H/PR:H/UI:R/AV:N/S:U/C:H/A:H/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Control Standard Edition Problem Types: Gain Access Description: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10872900 - https://exchange.xforce.ib
CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10872900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157063
CVE ID: CVE-2019-4072 State: PUBLISHED Published: 2019-05-09T15:10:15.606778Z Last Updated: 2024-09-17T03:08:21.842Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AC:L/S:U/AV:N/A:L/C:L/PR:H/UI:N/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Control Standard Edition Problem Types: Gain Access Description: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 15706
t period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10873036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157064
CVE ID: CVE-2019-4073 State: PUBLISHED Published: 2019-04-25T14:36:43.460864Z Last Updated: 2024-09-16T20:21:43.071Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/AC:L/S:C/PR:L/A:N/AV:N/UI:R/RL:O/RC:C/E:H) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157107. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 157107. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157107
CVE ID: CVE-2019-4074 State: PUBLISHED Published: 2019-04-25T14:36:43.502808Z Last Updated: 2024-09-16T22:51:18.750Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/C:L/AC:L/AV:N/A:N/S:C/PR:L/UI:R/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157108. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 157108. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157108
CVE ID: CVE-2019-4075 State: PUBLISHED Published: 2019-04-25T14:36:43.541469Z Last Updated: 2024-09-16T21:02:52.441Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/S:C/PR:L/A:N/AV:N/UI:R/I:L/C:L/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157109. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 157109. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157109
CVE ID: CVE-2019-4076 State: PUBLISHED Published: 2019-04-25T14:36:43.579561Z Last Updated: 2024-09-16T20:58:20.544Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/I:L/UI:R/S:C/PR:L/AV:N/A:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157110. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
trusted session. IBM X-Force ID: 157110. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/157110