Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4987 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-06T06:32:31.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/105896 - http://www-01.ibm.com/support/docview.wss?uid=swg21981017
CVE ID: CVE-2015-4988 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:31.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21968868
CVE ID: CVE-2015-4989 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T06:32:32.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21968866
CVE ID: CVE-2015-4990 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T06:32:31.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified connection type. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21969739
CVE ID: CVE-2015-4991 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T06:32:31.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21975663 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI46224
CVE ID: CVE-2015-4992 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965734 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10723
CVE ID: CVE-2015-4993 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T06:32:31.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-4998. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI47516 - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www.securityfo
/support/docview.wss?uid=swg1PI47516 - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www.securityfocus.com/bid/78609 - http://www.securitytracker.com/id/1034284
CVE ID: CVE-2015-4994 State: PUBLISHED Published: 2015-10-29T10:00:00 Last Updated: 2024-08-06T06:32:31.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than CVE-2015-5040. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033974 - http://www-01.ibm.com/support/docview.wss?uid=swg21969050
CVE ID: CVE-2015-4996 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T06:32:31.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034558 - http://www-01.ibm.com/support/docview.wss?uid=swg21972331
CVE ID: CVE-2015-4997 State: PUBLISHED Published: 2015-10-29T10:00:00 Last Updated: 2024-08-06T06:32:32.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21968474 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI47694 - http://www.securitytracker.com/id/1033982
CVE ID: CVE-2015-4998 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T06:32:31.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-4993. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI47712 - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www.securitytr
/support/docview.wss?uid=swg1PI47712 - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www.securitytracker.com/id/1034284
CVE ID: CVE-2015-5001 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T06:32:31.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service (memory consumption) via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970176 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI49540 - http://www.securitytracker.com/id/1034284
CVE ID: CVE-2015-5002 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:32.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973985
CVE ID: CVE-2015-5003 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T06:32:31.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV77742 - http://www.securitytracker.com/id/1034924 - http://www-01.ibm.com/support/docview.wss?uid=swg21970361
CVE ID: CVE-2015-5004 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T06:32:31.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034349 - http://www-01.ibm.com/support/docview.wss?uid=swg21966638 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI41476
CVE ID: CVE-2015-5005 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/powerha_advisory.asc - http://www-01.ibm.com/support/docview.wss?uid=isg1IV76946 - http://www.securityfocus.com/bid/76948 - http://www-01.ibm.com/support/docview.wss?uid=isg1IV77007 - http://www-01.ibm.com/support/docview.wss?uid=isg1IV
76948 - http://www-01.ibm.com/support/docview.wss?uid=isg1IV77007 - http://www-01.ibm.com/support/docview.wss?uid=isg1IV76943
CVE ID: CVE-2015-5006 State: PUBLISHED Published: 2015-12-07T20:00:00 Last Updated: 2024-08-06T06:32:31.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html - http://www-01.ibm.com/support/docview
tml - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78316 - http://www.securitytracker.com/id/1034214 - http://rhn.redhat.com/errata/RHSA-2015-2507.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://rhn.redhat.com/errata/RHSA-2015-2506.html - http://rhn.redhat.com/errata/RHSA-2015-2509.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html - http://www.securityfocus.com/bid/77645 - http://www-01.ibm.com/support/docview.wss?uid=swg21969225 - http://lists.opensuse.org/opensuse-security-announce/20
45 - http://www-01.ibm.com/support/docview.wss?uid=swg21969225 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-2508.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
CVE ID: CVE-2015-5007 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T06:32:31.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54268 - http://www.securitytracker.com/id/1034639 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54267 - http://www-01.ibm.com/support/docview.wss
r.com/id/1034639 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54267 - http://www-01.ibm.com/support/docview.wss?uid=swg21972611
CVE ID: CVE-2015-5008 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:31.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972610 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 - http://www-01.ibm.com/support/
docview.wss?uid=swg1JR54834 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824 - http://www.securitytracker.com/id/1034695 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825
CVE ID: CVE-2015-5009 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T06:32:31.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972610 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 - http://www-01.ibm.co
m/support/docview.wss?uid=swg1JR54834 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824 - http://www.securitytracker.com/id/1034695 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825
CVE ID: CVE-2015-5010 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T06:32:31.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21970508 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV80728 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV80694
CVE ID: CVE-2015-5011 State: PUBLISHED Published: 2015-10-26T01:00:00 Last Updated: 2024-08-06T06:32:31.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check authorization for MQSISTARTMSGFLOW and MQSISTOPMSGFLOW commands, which allows local users to bypass intended access restrictions, and start or stop a service, by issuing a command. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967265 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI28139
CVE ID: CVE-2015-5012 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T06:32:31.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 - http://www-01.ibm.com/support/do
cview.wss?uid=swg1IV78768 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 - http://www-01.ibm.com/support/docview.wss?uid=swg21971422
CVE ID: CVE-2015-5013 State: PUBLISHED Published: 2017-02-08T19:00:00 Last Updated: 2024-08-06T06:32:31.950Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96090 - http://www.ibm.com/support/docview.wss?uid=swg21993722 - http://www.securitytracker.com/id/1037792
CVE ID: CVE-2015-5014 State: PUBLISHED Published: 2015-10-26T01:00:00 Last Updated: 2024-08-06T06:32:32.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967228
CVE ID: CVE-2015-5015 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24041027 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970 - http://www.securitytracker.com/id/1034104
CVE ID: CVE-2015-5016 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-06T06:32:31.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/106460 - http://www-01.ibm.com/support/docview.wss?uid=
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/106460 - http://www-01.ibm.com/support/docview.wss?uid=swg21971160
CVE ID: CVE-2015-5017 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T06:32:32.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended access restrictions and establish a login session by entering an expired password. Additional Analyst Notes: - CVE Progra
ccess restrictions and establish a login session by entering an expired password. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21969052
CVE ID: CVE-2015-5018 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T06:32:32.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768 - http://www-01.ibm.com/support/docview.wss?uid=swg21970510 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 - http://www.securitytracker.com/
ocview.wss?uid=swg21970510 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 - http://www.securitytracker.com/id/1034560
CVE ID: CVE-2015-5019 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T06:32:31.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload files by leveraging a password-change requirement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT11008 - http://www-01.ibm.com/support/docview.wss?uid=swg21967781
CVE ID: CVE-2015-5020 State: PUBLISHED Published: 2016-01-02T02:00:00 Last Updated: 2024-08-06T06:32:31.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary tables via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967923 - http://www.securitytracker.com/id/1034561
CVE ID: CVE-2015-5021 State: PUBLISHED Published: 2015-11-04T02:00:00 Last Updated: 2024-08-06T06:32:31.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to bypass intended job-execution restrictions or obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21968195 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54224 - http://www.securitytracker.com/id/1034043
CVE ID: CVE-2015-5022 State: PUBLISHED Published: 2015-10-05T10:00:00 Last Updated: 2024-08-06T06:32:31.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information by leveraging a trading-partner relationship and reading response fields. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10702 - http://www-01.ibm.com/support/docvi
Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT10702 - http://www-01.ibm.com/support/docview.wss?uid=swg21967334
CVE ID: CVE-2015-5023 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T06:32:31.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21967851