Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4731 State: PUBLISHED Published: 2020-09-21T14:55:25.579220Z Last Updated: 2024-09-17T02:47:25.376Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/AC:L/C:L/S:C/I:L/PR:N/A:N/AV:N/E:H/RC:C/RL:O) Vendors: IBM Products: Aspera Shares Problem Types: Cross-Site Scripting Description: IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6326929 - h
055. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6326929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188055
CVE ID: CVE-2020-4732 State: PUBLISHED Published: 2021-06-02T20:40:37.689209Z Last Updated: 2024-09-17T03:14:06.980Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/S:U/A:N/UI:N/AC:L/I:N/AV:N/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management, Engineering Lifecycle Optimization, Rational Quality Manager, Rational Rhapsody Model Manager, Engineering Test Management Problem Types: Obtain Information Description: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126. Additiona
thenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188126
CVE ID: CVE-2020-4733 State: PUBLISHED Published: 2021-01-08T20:40:25.291517Z Last Updated: 2024-09-17T00:25:50.346Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/S:C/AC:L/UI:R/C:L/I:L/AV:N/RL:O/RC:C/E:H) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Engineering Workflow Management, Engineering Test Management, Rational Engineering Lifecycle Manager, Rational Quality Manager, Engineering Lifecycle Optimization, Rational DOORS Next Generation, Rational Rhapsody Model Manager, Rational Rhapsody Design Manager, Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows
te Scripting Description: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188127
CVE ID: CVE-2020-4739 State: PUBLISHED Published: 2020-11-20T13:50:14.651408Z Last Updated: 2024-09-17T02:05:51.808Z Severity: HIGH (CVSS 7.8 CVSS:3.0/PR:N/A:H/AV:L/AC:L/UI:R/S:U/I:H/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially crafted file in a compromised folder, an attacker could exploi
ility in Microsoft Windows client. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 188149. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6370023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188149
CVE ID: CVE-2020-4740 State: PUBLISHED Published: 2020-10-12T13:20:31.873046Z Last Updated: 2024-09-17T02:26:33.301Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:A/AC:L/PR:N/A:N/C:L/S:C/UI:R/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346920 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188150
CVE ID: CVE-2020-4741 State: PUBLISHED Published: 2020-10-12T13:20:32.301732Z Last Updated: 2024-09-17T00:51:23.253Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AC:L/AV:N/PR:L/S:C/C:L/A:N/I:L/UI:N/RC:C/RL:O/E:H) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188197. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.c
sted session. IBM X-Force ID: 188197. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188197
CVE ID: CVE-2020-4747 State: PUBLISHED Published: 2020-12-15T14:45:21.900439Z Last Updated: 2024-09-16T18:13:52.140Z Severity: HIGH (CVSS 7.4 CVSS:3.0/I:H/AC:H/S:U/PR:N/UI:N/A:N/AV:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling Connect:Direct for UNIX Problem Types: Gain Access Description: IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6381904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188516
CVE ID: CVE-2020-4748 State: PUBLISHED Published: 2020-10-20T14:15:33.244359Z Last Updated: 2024-09-16T19:50:55.034Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/UI:R/PR:N/I:L/S:C/AC:L/AV:N/A:N/C:L/E:H/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Cross-Site Scripting Description: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188517. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349449
188517. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188517
CVE ID: CVE-2020-4749 State: PUBLISHED Published: 2020-10-20T14:15:33.677493Z Last Updated: 2024-09-17T01:11:47.263Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/A:N/AV:N/AC:L/S:U/I:N/PR:N/UI:R/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 188518. Additional A
ure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 188518. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188518
CVE ID: CVE-2020-4755 State: PUBLISHED Published: 2020-10-20T14:15:34.173968Z Last Updated: 2024-09-17T02:52:54.469Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/C:L/S:C/I:L/PR:L/UI:R/AV:N/AC:L/RC:C/RL:O/E:H) Vendors: IBM Products: Spectrum Scale Problem Types: Cross-Site Scripting Description: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188595. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349449
188595. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188595
CVE ID: CVE-2020-4756 State: PUBLISHED Published: 2020-10-20T14:15:34.611179Z Last Updated: 2024-09-16T23:21:52.772Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:H/C:N/PR:N/UI:N/S:U/I:N/AC:L/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: Elastic Storage Server, Spectrum Scale Problem Types: Denial of Service Description: IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599. Additional Analyst Notes: - CVE Program Container: References: - https://
e a denial of service. IBM X-Force ID: 188599. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349469 - https://www.ibm.com/support/pages/node/6349475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188599
CVE ID: CVE-2020-4757 State: PUBLISHED Published: 2020-12-21T17:50:30.054983Z Last Updated: 2024-09-16T17:43:22.631Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/C:L/I:L/A:N/UI:N/AV:N/S:C/PR:L/AC:L/E:H/RL:O/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.
usted session. IBM X-Force ID: 188600. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6388806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188600 - https://www.gosecure.net/blog/2022/06/21/xss-vulnerability-in-ibm-content-navigator-cve-2020-4757/
CVE ID: CVE-2020-4759 State: PUBLISHED Published: 2020-11-09T20:25:18.355674Z Last Updated: 2024-09-16T17:49:21.441Z Severity: HIGH (CVSS 7 CVSS:3.0/C:H/AC:H/A:H/S:U/PR:N/AV:L/UI:R/I:H/RC:C/E:U/RL:O) Vendors: IBM Products: FileNet Content Manager Problem Types: Gain Access Description: IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6336917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188736
CVE ID: CVE-2020-4760 State: PUBLISHED Published: 2020-11-10T14:50:27.729549Z Last Updated: 2024-09-16T20:07:16.687Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/A:N/AC:L/C:L/UI:R/PR:L/S:C/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6365329 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6365329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188737
CVE ID: CVE-2020-4761 State: PUBLISHED Published: 2021-01-05T15:10:18.312120Z Last Updated: 2024-09-17T03:07:14.619Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/AC:L/A:N/UI:N/PR:N/C:L/I:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895. Additional Analyst Notes: - CVE Program Container: References: - http
ttacks against the system. IBM X-Force ID: 188895. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6396146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188895
CVE ID: CVE-2020-4762 State: PUBLISHED Published: 2021-01-05T15:10:18.989105Z Last Updated: 2024-09-17T03:38:20.531Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/UI:N/PR:L/C:H/AV:N/I:H/S:U/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Gain Privileges Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6396130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188896
CVE ID: CVE-2020-4763 State: PUBLISHED Published: 2020-11-16T16:40:38.102239Z Last Updated: 2024-09-16T23:51:10.119Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/PR:N/I:N/C:L/AV:N/S:U/AC:L/UI:R/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the t
oes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 188897. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6368025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188897
CVE ID: CVE-2020-4764 State: PUBLISHED Published: 2020-12-18T15:00:16.957583Z Last Updated: 2024-09-17T00:00:47.499Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/I:L/AC:L/UI:R/A:N/PR:N/AV:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6386492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188898
CVE ID: CVE-2020-4765 State: PUBLISHED Published: 2021-05-19T19:40:20.459252Z Last Updated: 2024-09-16T19:30:17.348Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/UI:N/AV:L/I:N/AC:L/A:N/C:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cloud Pak for Multicloud Management Problem Types: Obtain Information Description: IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 188902. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188902
CVE ID: CVE-2020-4766 State: PUBLISHED Published: 2021-01-22T16:50:13.674715Z Last Updated: 2024-09-16T16:23:03.979Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:N/PR:N/AV:N/S:U/A:H/UI:N/I:N/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Internet Pass-Thru Problem Types: Denial of Service Description: IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6406254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188903
CVE ID: CVE-2020-4767 State: PUBLISHED Published: 2020-10-28T16:15:19.451086Z Last Updated: 2024-09-16T17:59:04.447Z Severity: HIGH (CVSS 7.5 CVSS:3.0/UI:N/A:H/I:N/PR:N/AV:N/C:N/AC:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling Connect Direct for Microsoft Windows Problem Types: Denial of Service Description: IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/63
e ID: 188906. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6356019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188906
CVE ID: CVE-2020-4768 State: PUBLISHED Published: 2021-02-11T16:30:28.795523Z Last Updated: 2024-09-16T16:33:02.883Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/UI:R/C:L/S:C/PR:L/A:N/AV:N/I:L/AC:H/RC:C/E:H/RL:O) Vendors: IBM Products: Business Automation Workflow, Case Manager Problem Types: Cross-Site Scripting Description: IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188907. Additional Analyst Notes: - CVE Prog
leading to credentials disclosure within a trusted session. IBM X-Force ID: 188907. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188907
CVE ID: CVE-2020-4771 State: PUBLISHED Published: 2020-11-23T16:55:19.824419Z Last Updated: 2024-09-17T02:00:53.424Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/A:N/AV:N/AC:L/UI:N/PR:N/S:U/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Operations Center Problem Types: Obtain Information Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993. Additiona
stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6369101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/188993
CVE ID: CVE-2020-4772 State: PUBLISHED Published: 2020-10-12T13:05:36.161604Z Last Updated: 2024-09-16T16:58:38.130Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/I:N/C:H/S:U/UI:N/PR:L/A:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Curam SPM Problem Types: Gain Access Description: An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6344069 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6344069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189150
CVE ID: CVE-2020-4773 State: PUBLISHED Published: 2020-10-12T13:05:36.650119Z Last Updated: 2024-09-16T22:29:43.736Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:N/S:U/UI:R/AC:L/I:H/A:N/AV:N/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Curam SPM Problem Types: Gain Access Description: A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no impact to remainder of web application. IBM X-Force ID: 189151. Additional Analyst Notes: - CVE Program Container: References:
to remainder of web application. IBM X-Force ID: 189151. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6344097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189151
CVE ID: CVE-2020-4774 State: PUBLISHED Published: 2020-10-12T13:05:37.095122Z Last Updated: 2024-09-16T19:14:08.886Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/UI:N/S:U/AC:L/I:L/A:N/AV:N/PR:L/RC:C/RL:O/E:U) Vendors: IBM Products: Curam SPM Problem Types: Obtain Information Description: An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152. Additional Analyst Notes: - CVE Program Container: Re
uch as XML document structure and content. IBM X-Force ID: 189152. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189152
CVE ID: CVE-2020-4775 State: PUBLISHED Published: 2020-10-12T13:05:37.530211Z Last Updated: 2024-09-17T03:03:21.643Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/S:C/C:L/I:L/AC:L/AV:N/A:N/PR:L/E:H/RL:O/RC:C) Vendors: IBM Products: Curam SPM Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/
n. IBM X-Force ID: 189153. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/189153