Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4635 State: PUBLISHED Published: 2020-01-28T18:30:54.856263Z Last Updated: 2024-09-16T19:25:26.508Z Severity: LOW (CVSS 2.7 CVSS:3.0/A:N/S:U/PR:H/UI:N/AC:L/I:L/C:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Gain Access Description: IBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command injection due to imporoper input neutralization of special elements. IBM X-Force ID: 170011. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170011
CVE ID: CVE-2019-4636 State: PUBLISHED Published: 2020-01-28T18:30:55.290337Z Last Updated: 2024-09-16T19:05:35.447Z Severity: LOW (CVSS 2.7 CVSS:3.0/A:N/S:U/UI:N/PR:H/C:L/AV:N/AC:L/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages. IBM X-Force ID: 170013. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170013
CVE ID: CVE-2019-4637 State: PUBLISHED Published: 2020-01-28T18:30:55.724363Z Last Updated: 2024-09-16T23:55:42.389Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/S:U/PR:L/UI:N/AV:N/C:N/I:L/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Secret Server Problem Types: Gain Access Description: IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 170043. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170043
CVE ID: CVE-2019-4638 State: PUBLISHED Published: 2020-01-28T18:30:56.205399Z Last Updated: 2024-09-16T23:06:48.272Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/S:U/PR:N/UI:N/AC:H/I:N/C:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170044
CVE ID: CVE-2019-4639 State: PUBLISHED Published: 2020-01-28T18:30:56.694038Z Last Updated: 2024-09-16T17:23:49.508Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/I:N/C:H/AV:N/PR:N/UI:N/S:U/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 170045. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170045
CVE ID: CVE-2019-4640 State: PUBLISHED Published: 2020-02-19T15:15:45.051545Z Last Updated: 2024-09-17T02:01:41.833Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Secret Server Problem Types: Gain Access Description: IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/2929923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170046
CVE ID: CVE-2019-4644 State: PUBLISHED Published: 2020-04-17T13:25:26.254254Z Last Updated: 2024-09-16T19:01:05.309Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/C:L/S:C/I:L/A:N/PR:N/UI:R/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6191583
170880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6191583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170880
CVE ID: CVE-2019-4645 State: PUBLISHED Published: 2019-11-09T01:41:11.637386Z Last Updated: 2024-09-17T04:29:10.807Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/C:L/A:N/S:C/AC:L/AV:N/I:L/PR:N/UI:R/RC:C/RL:O/E:H) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170881. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074144 - h
881. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170881
CVE ID: CVE-2019-4650 State: PUBLISHED Published: 2020-06-26T13:45:30.407618Z Last Updated: 2024-09-17T04:14:29.055Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AV:N/AC:L/I:L/UI:N/S:U/C:L/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Data Manipulation Description: IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170961. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6223922 - https://exchange.xforce.ibmcloud.c
CVE Program Container: References: - https://www.ibm.com/support/pages/node/6223922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170961
CVE ID: CVE-2019-4651 State: PUBLISHED Published: 2020-01-09T17:00:19.212935Z Last Updated: 2024-09-17T01:02:05.101Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/UI:R/I:L/S:C/A:N/PR:L/AC:L/C:L/RC:C/RL:O/E:H) Vendors: IBM Products: Jazz Reporting Service (JRS) Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1169956 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1169956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170962
CVE ID: CVE-2019-4652 State: PUBLISHED Published: 2019-11-12T15:20:48.885435Z Last Updated: 2024-09-16T19:51:59.514Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/C:L/A:N/UI:N/PR:N/S:U/I:L/AC:L/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Access Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1105683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/1105683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170963
CVE ID: CVE-2019-4653 State: PUBLISHED Published: 2021-05-31T15:10:39.100534Z Last Updated: 2024-09-17T03:28:02.023Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/AC:L/A:N/S:C/I:L/C:L/PR:L/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - h
964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170964 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2019-4654 State: PUBLISHED Published: 2020-04-15T15:13:54.596024Z Last Updated: 2024-09-16T23:20:27.273Z Severity: LOW (CVSS 3.7 CVSS:3.0/C:L/AC:H/PR:N/UI:N/AV:N/I:N/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Qradar, QRadar Problem Types: Obtain Information Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-ForceID: 170965. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6189723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170965
CVE ID: CVE-2019-4655 State: PUBLISHED Published: 2019-12-30T15:35:22.708634Z Last Updated: 2024-09-17T01:55:55.073Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/A:L/S:U/I:N/PR:L/AV:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1106529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170
References: - https://www.ibm.com/support/pages/node/1106529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170966
CVE ID: CVE-2019-4656 State: PUBLISHED Published: 2020-03-16T15:25:20.439438Z Last Updated: 2024-09-17T04:18:51.019Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/C:N/S:U/A:H/I:N/AC:L/PR:L/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force ID: 170967. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1135095 - https://exchange.xforce.ibmcloud.com/vulnerabil
ontainer: References: - https://www.ibm.com/support/pages/node/1135095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/170967
CVE ID: CVE-2019-4663 State: PUBLISHED Published: 2019-12-10T16:10:24.526768Z Last Updated: 2024-09-16T17:03:38.088Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/UI:R/PR:L/AV:N/S:C/AC:L/A:N/I:L/RC:C/E:H/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171245. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pa
IBM X-Force ID: 171245. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1127367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171245
CVE ID: CVE-2019-4665 State: PUBLISHED Published: 2019-12-11T14:25:17.749318Z Last Updated: 2024-09-16T23:01:26.682Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/PR:L/C:L/S:C/AC:L/I:L/AV:N/E:H/RL:O/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Cross-Site Scripting Description: IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118937 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171247
CVE ID: CVE-2019-4666 State: PUBLISHED Published: 2020-02-13T15:40:21.747521Z Last Updated: 2024-09-16T21:08:27.032Z Severity: LOW (CVSS 2.3 CVSS:3.0/AC:L/I:N/UI:N/PR:H/A:N/AV:L/S:U/C:L/RL:O/E:U/RC:C) Vendors: IBM Products: UrbanCode Deploy, UrbanCode Build Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certain secure values in documents. IBM X-Force ID: 171248. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1138576 - https://www.ibm.com/support/pages/node/2325141 - https://exchange.xforce.ibmcloud.com/vu
om/support/pages/node/1138576 - https://www.ibm.com/support/pages/node/2325141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171248
CVE ID: CVE-2019-4667 State: PUBLISHED Published: 2020-05-11T17:20:13.168556Z Last Updated: 2024-09-17T01:46:22.672Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/S:U/PR:N/A:N/I:N/AC:H/UI:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 171249. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/no
-Force ID: 171249. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6208076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171249
CVE ID: CVE-2019-4668 State: PUBLISHED Published: 2020-04-23T13:10:22.520321Z Last Updated: 2024-09-17T02:06:36.587Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/PR:N/UI:N/A:N/C:H/I:N/AV:L/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: UrbanCode Deploy Problem Types: Obtain Information Description: IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171250. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6195699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171250
CVE ID: CVE-2019-4669 State: PUBLISHED Published: 2020-02-27T16:10:16.660427Z Last Updated: 2024-09-17T02:16:45.588Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/A:L/AC:L/UI:N/AV:N/PR:L/C:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Business Automation Workflow, Business Process Manager Problem Types: Data Manipulation Description: IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 1
s, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171254. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3552261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171254
CVE ID: CVE-2019-4670 State: PUBLISHED Published: 2020-02-05T15:20:24.877759Z Last Updated: 2024-09-16T19:15:44.023Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/I:N/C:H/AC:L/UI:N/A:N/AV:N/PR:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper data representation. IBM X-Force ID: 171319. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1289152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171319
CVE ID: CVE-2019-4671 State: PUBLISHED Published: 2020-09-15T13:50:23.236861Z Last Updated: 2024-09-17T02:10:46.368Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/A:L/AV:N/I:L/S:U/UI:N/C:L/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Asset Management Problem Types: Data Manipulation Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171437. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332583 - https://exchange.xforce.ib
otes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6332583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171437
CVE ID: CVE-2019-4672 State: PUBLISHED Published: 2020-02-25T13:55:18.453520Z Last Updated: 2024-09-16T19:00:26.263Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/A:N/C:L/PR:N/UI:N/AV:N/I:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Qradar Advisor Problem Types: Obtain Information Description: IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/3379965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171438
CVE ID: CVE-2019-4674 State: PUBLISHED Published: 2020-02-04T16:45:37.277900Z Last Updated: 2024-09-17T01:16:01.199Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:C/PR:H/C:H/UI:N/I:N/A:N/AV:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 171510. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288714 - https://exchange.xforce.i
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171510
CVE ID: CVE-2019-4675 State: PUBLISHED Published: 2020-02-04T16:45:37.764340Z Last Updated: 2024-09-16T16:28:34.866Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/S:C/PR:N/C:H/UI:N/I:N/A:N/AC:H/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288714 - https://exchange.xforce
t Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1288714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171511
CVE ID: CVE-2019-4676 State: PUBLISHED Published: 2020-07-01T14:25:29.182073Z Last Updated: 2024-09-17T02:41:13.529Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:N/AV:N/S:C/C:H/PR:L/UI:N/A:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Security Identity Manager Virtual Appliance Problem Types: Obtain Information Description: IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171512. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171512
CVE ID: CVE-2019-4679 State: PUBLISHED Published: 2020-01-28T18:30:57.115952Z Last Updated: 2024-09-17T03:02:23.293Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:L/UI:N/I:N/AC:L/AV:N/C:L/A:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1283458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171515
CVE ID: CVE-2019-4680 State: PUBLISHED Published: 2020-10-20T14:15:31.882069Z Last Updated: 2024-09-16T19:19:19.364Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/C:L/PR:L/UI:N/S:U/I:L/AC:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349515 - h
733. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171733
CVE ID: CVE-2019-4681 State: PUBLISHED Published: 2020-03-24T15:20:22.428435Z Last Updated: 2024-09-16T20:13:11.272Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/PR:N/AV:N/A:N/UI:R/S:C/C:L/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Tivoli Netcool Impact Problem Types: Cross-Site Scripting Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171734. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/p
. IBM X-Force ID: 171734. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6115942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/171734
CVE ID: CVE-2019-4686 State: PUBLISHED Published: 2020-08-26T19:00:36.576850Z Last Updated: 2024-09-16T18:18:55.301Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/UI:N/C:L/I:N/PR:N/AC:H/S:U/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Data Encryption Problem Types: Obtain Information Description: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-For