Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1509 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-17T03:38:03.285Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 1414
ftware might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 141417. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10730321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141417 - http://www.securitytracker.com/id/1041759
CVE ID: CVE-2018-1513 State: PUBLISHED Published: 2018-07-23T13:00:00Z Last Updated: 2024-09-16T20:31:53.860Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141551. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfo
d session. IBM X-Force ID: 141551. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141551 - http://www.ibm.com/support/docview.wss?uid=ibm10717031 - http://www.securityfocus.com/bid/104910 - https://www.exploit-db.com/exploits/45190/
CVE ID: CVE-2018-1514 State: PUBLISHED Published: 2018-06-07T14:00:00Z Last Updated: 2024-09-17T00:16:37.345Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Gain Access Description: IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 141622. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016099 - https://exch
lyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141622
CVE ID: CVE-2018-1515 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-16T18:59:35.214Z Severity: HIGH (CVSS 7.4 CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 141624. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040969 - https://exchange.xforce.ibmcloud.com/v
CVE Program Container: References: - http://www.securitytracker.com/id/1040969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141624 - http://www.ibm.com/support/docview.wss?uid=swg22016140
CVE ID: CVE-2018-1517 State: PUBLISHED Published: 2018-08-20T21:00:00Z Last Updated: 2024-09-16T17:34:15.110Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: SDK, Java Technology Edition Problem Types: Denial of Service Description: A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10719653 - https://access.redhat.com/errata/RHSA-2018:2713 - https://exchange.xforce.i
bm.com/support/docview.wss?uid=ibm10719653 - https://access.redhat.com/errata/RHSA-2018:2713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141681 - https://access.redhat.com/errata/RHSA-2018:2575 - https://access.redhat.com/errata/RHSA-2018:2576 - https://access.redhat.com/errata/RHSA-2018:2568 - https://access.redhat.com/errata/RHSA-2018:2569 - https://access.redhat.com/errata/RHSA-2018:2712 - http://www.securityfocus.com/bid/105117
CVE ID: CVE-2018-1518 State: PUBLISHED Published: 2018-10-18T16:00:00Z Last Updated: 2024-09-16T20:57:32.155Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM X-Force ID: 141682. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22017446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/141682
CVE ID: CVE-2018-1521 State: PUBLISHED Published: 2018-07-10T15:00:00Z Last Updated: 2024-09-16T19:10:30.922Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141802. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xfo
d session. IBM X-Force ID: 141802. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141802 - https://www.ibm.com/support/docview.wss?uid=ibm10716507
CVE ID: CVE-2018-1522 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-17T02:51:47.780Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141803. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 141803. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141803 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1523 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-17T03:54:49.926Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141804. Additional Analyst Notes: - CVE Program Container: References: - https://exchan
trusted session. IBM X-Force ID: 141804. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141804 - http://www.ibm.com/support/docview.wss?uid=ibm10716607
CVE ID: CVE-2018-1524 State: PUBLISHED Published: 2018-08-03T15:00:00Z Last Updated: 2024-09-16T18:29:30.579Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142116 - https://www.ibm.com/support/docv
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142116 - https://www.ibm.com/support/docview.wss?uid=swg22017452
CVE ID: CVE-2018-1525 State: PUBLISHED Published: 2018-12-06T14:00:00Z Last Updated: 2024-09-16T18:24:40.424Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: i2 Enterprise Insight Analysis Problem Types: Obtain Information Description: IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142117. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/sup
niques. IBM X-Force ID: 142117. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10738699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142117
CVE ID: CVE-2018-1528 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T03:17:22.512Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22017450 - http://www.securityfocus.com/bid/105023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142290
CVE ID: CVE-2018-1529 State: PUBLISHED Published: 2018-07-19T14:00:00 Last Updated: 2024-08-05T04:07:43.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142291. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104928 - http://www.ibm.com/support/docview.wss
- CVE Program Container: References: - http://www.securityfocus.com/bid/104928 - http://www.ibm.com/support/docview.wss?uid=ibm10717531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142291
CVE ID: CVE-2018-1532 State: PUBLISHED Published: 2018-05-31T21:00:00Z Last Updated: 2024-09-16T18:43:48.294Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142430 - http://www.ibm.com/support/docview.wss?uid=swg22015978
CVE ID: CVE-2018-1533 State: PUBLISHED Published: 2018-10-12T12:00:00Z Last Updated: 2024-09-16T19:05:46.513Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Cross-Site Scripting Description: IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142431. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.
X-Force ID: 142431. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10734697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142431
CVE ID: CVE-2018-1534 State: PUBLISHED Published: 2018-10-12T12:00:00Z Last Updated: 2024-09-16T22:14:09.255Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Publishing Engine Problem Types: Cross-Site Scripting Description: IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142432. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.co
X-Force ID: 142432. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142432 - http://www.ibm.com/support/docview.wss?uid=ibm10734697
CVE ID: CVE-2018-1535 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-16T20:52:22.851Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Software Architect Design Manager Problem Types: Cross-Site Scripting Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c
users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142557 - http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE ID: CVE-2018-1536 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-17T03:52:38.772Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Software Architect Design Manager, Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c
users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142558. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142558 - http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE ID: CVE-2018-1539 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T23:40:40.530Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Gain Access Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to a page other than URL intended. IBM X-Force ID: 142561. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142561 - https://www.ibm.com/support/docview.wss
ner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142561 - https://www.ibm.com/support/docview.wss?uid=ibm10731511
CVE ID: CVE-2018-1541 State: PUBLISHED Published: 2018-10-24T13:00:00Z Last Updated: 2024-09-16T19:35:20.784Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Commerce Enterprise Problem Types: Cross-Site Scripting Description: IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142596. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/do
IBM X-Force ID: 142596. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731225 - http://www.securityfocus.com/bid/105744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142596
CVE ID: CVE-2018-1542 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-17T00:51:48.607Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: FileNet P8 Platform Problem Types: Obtain Information Description: IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597. Additional Analyst Notes: - CVE Program
xpose sensitive information or consume memory resources. IBM X-Force ID: 142597. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142597 - http://www.ibm.com/support/docview.wss?uid=swg22015943 - http://www.securitytracker.com/id/1041225
CVE ID: CVE-2018-1543 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-17T03:48:13.036Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142598. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016346 - https://exchang
t Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142598
CVE ID: CVE-2018-1544 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T03:18:32.180Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 142648. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016143 - https://exchange.xforce.ibmcloud.com/vulnerabilities
erences: - http://www.ibm.com/support/docview.wss?uid=swg22016143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142648 - http://www.securitytracker.com/id/1040967
CVE ID: CVE-2018-1545 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-17T02:53:23.872Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142649 - http://www.ibm.com/support/docview.wss?uid=ibm10718013
CVE ID: CVE-2018-1546 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-17T01:06:33.675Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142650. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1426
ditional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/142650 - https://www.ibm.com/support/pages/node/715299
CVE ID: CVE-2018-1547 State: PUBLISHED Published: 2018-06-07T14:00:00Z Last Updated: 2024-09-16T23:55:25.268Z Severity: HIGH (CVSS 8 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Gain Access Description: IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security questions, an attacker could exploit this vulnerability to run any command or program on the v
confirm the two security questions, an attacker could exploit this vulnerability to run any command or program on the victim's machine. IBM X-Force ID: 142651. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142651 - http://www.ibm.com/support/docview.wss?uid=swg22016197
CVE ID: CVE-2018-1548 State: PUBLISHED Published: 2018-07-09T13:00:00Z Last Updated: 2024-09-16T22:03:01.017Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 142657. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104734 - http://www.ibm.com/support/docview.wss?uid=swg22017136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/142657