Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4580 State: PUBLISHED Published: 2020-09-21T14:55:24.241315Z Last Updated: 2024-09-16T17:54:47.888Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:N/I:N/A:H/AV:N/UI:N/AC:L/C:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Denial of Service Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. IBM X-Force ID: 184439. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184439
CVE ID: CVE-2020-4581 State: PUBLISHED Published: 2020-09-21T14:55:24.672061Z Last Updated: 2024-09-17T01:56:28.852Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:U/UI:N/AC:L/C:N/I:N/PR:N/A:H/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Denial of Service Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184441
CVE ID: CVE-2020-4584 State: PUBLISHED Published: 2020-10-30T13:50:16.466711Z Last Updated: 2024-09-16T16:43:35.841Z Severity: LOW (CVSS 3.3 CVSS:3.0/C:L/AV:L/AC:L/A:N/S:U/I:N/UI:N/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: i2 iBase Problem Types: Obtain Information Description: IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6357065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184574
CVE ID: CVE-2020-4587 State: PUBLISHED Published: 2020-08-24T15:30:31.574862Z Last Updated: 2024-09-16T23:41:45.685Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/PR:N/C:H/AV:L/S:U/I:H/UI:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: Sterling Connect:Direct for UNIX, Connect:Direct for UNIX Problem Types: Gain Privileges Description: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320317 - https://exchan
al Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184578
CVE ID: CVE-2020-4588 State: PUBLISHED Published: 2020-10-30T13:50:16.900629Z Last Updated: 2024-09-16T16:53:00.289Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/C:H/I:H/UI:R/PR:H/S:C/A:H/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: i2 iBase Problem Types: Gain Privileges Description: IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6357037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184579
CVE ID: CVE-2020-4589 State: PUBLISHED Published: 2020-08-13T11:50:13.870492Z Last Updated: 2024-09-16T20:03:10.813Z Severity: HIGH (CVSS 8.1 CVSS:3.0/PR:N/I:H/C:H/A:H/UI:N/AC:H/S:U/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 184585. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6258333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18458
eferences: - https://www.ibm.com/support/pages/node/6258333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184585
CVE ID: CVE-2020-4590 State: PUBLISHED Published: 2020-09-21T14:55:25.148605Z Last Updated: 2024-09-16T19:25:27.062Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/UI:N/AC:H/C:N/PR:L/I:N/AV:N/A:H/RC:C/RL:O/E:U) Vendors: IBM Products: WebSphere Application Server Liberty Problem Types: Denial of Service Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6333623 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6333623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184650
CVE ID: CVE-2020-4591 State: PUBLISHED Published: 2020-08-28T14:35:20.547603Z Last Updated: 2024-09-17T00:02:30.204Z Severity: LOW (CVSS 2.9 CVSS:3.0/A:N/AC:H/C:L/S:U/AV:L/I:N/PR:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Server Problem Types: Obtain Information Description: IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
er: References: - https://www.ibm.com/support/pages/node/6323765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184746
CVE ID: CVE-2020-4592 State: PUBLISHED Published: 2020-11-18T17:20:18.953203Z Last Updated: 2024-09-16T22:40:17.273Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/AV:N/AC:H/S:U/UI:N/I:H/C:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Appliance Problem Types: Data Manipulation Description: IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6359019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184755
CVE ID: CVE-2020-4593 State: PUBLISHED Published: 2020-08-24T15:30:31.985613Z Last Updated: 2024-09-16T22:20:16.988Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/I:N/AC:L/UI:N/C:H/AV:L/S:U/PR:H/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184747
CVE ID: CVE-2020-4594 State: PUBLISHED Published: 2021-01-13T18:10:27.967475Z Last Updated: 2024-09-16T22:03:29.253Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/S:U/I:N/UI:N/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184800
CVE ID: CVE-2020-4595 State: PUBLISHED Published: 2021-01-13T18:10:28.667092Z Last Updated: 2024-09-16T17:28:43.214Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/UI:N/I:N/S:U/C:H/AV:N/AC:H/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184819
CVE ID: CVE-2020-4596 State: PUBLISHED Published: 2021-01-13T18:10:29.354245Z Last Updated: 2024-09-17T02:17:00.892Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/I:N/UI:N/A:N/AC:H/AV:N/C:H/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184821
CVE ID: CVE-2020-4597 State: PUBLISHED Published: 2021-01-13T18:10:30.002368Z Last Updated: 2024-09-16T19:14:48.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/A:N/AV:N/C:L/S:U/I:N/UI:R/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 184822. Addi
he insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 184822. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184822
CVE ID: CVE-2020-4598 State: PUBLISHED Published: 2020-08-24T15:30:32.411547Z Last Updated: 2024-09-16T17:08:27.219Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/S:U/C:N/AC:L/UI:R/I:H/A:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Gain Access Description: IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive inform
to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 184823. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184823
CVE ID: CVE-2020-4599 State: PUBLISHED Published: 2021-01-13T18:10:30.675784Z Last Updated: 2024-09-16T22:46:54.611Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/AV:N/A:N/AC:L/UI:N/I:N/S:U/PR:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184824
CVE ID: CVE-2020-4600 State: PUBLISHED Published: 2021-01-13T18:10:31.318934Z Last Updated: 2024-09-17T00:01:55.002Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:N/AV:N/A:N/AC:L/C:L/I:N/S:U/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.
Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184832
CVE ID: CVE-2020-4602 State: PUBLISHED Published: 2021-01-13T18:10:31.942176Z Last Updated: 2024-09-17T03:49:04.504Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/C:H/A:N/AC:L/AV:L/UI:N/S:U/I:N/PR:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184836. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184836
CVE ID: CVE-2020-4603 State: PUBLISHED Published: 2020-08-27T12:40:34.545611Z Last Updated: 2024-09-16T21:07:37.538Z Severity: LOW (CVSS 3.3 CVSS:3.0/C:L/A:N/I:L/S:U/AC:H/PR:H/UI:N/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Gain Privileges Description: IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184880
CVE ID: CVE-2020-4604 State: PUBLISHED Published: 2021-01-13T18:10:32.577575Z Last Updated: 2024-09-17T00:42:33.371Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:L/AC:H/A:N/C:H/I:N/S:U/UI:N/PR:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Insights Problem Types: Obtain Information Description: IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6403463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184881
CVE ID: CVE-2020-4606 State: PUBLISHED Published: 2021-01-08T14:45:24.950661Z Last Updated: 2024-09-17T01:05:37.154Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/PR:N/C:L/AC:L/S:C/I:N/AV:L/UI:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Privilege Manager Problem Types: Gain Access Description: IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398602 - https://exchange.x
nalyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6398602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184883
CVE ID: CVE-2020-4607 State: PUBLISHED Published: 2020-09-29T13:50:13.312232Z Last Updated: 2024-09-17T01:40:44.853Z Severity: LOW (CVSS 3.3 CVSS:3.0/I:L/AV:L/PR:L/C:N/AC:L/S:U/UI:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Privilege Vault Remote Problem Types: Bypass Security Description: IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6338813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184884
CVE ID: CVE-2020-4609 State: PUBLISHED Published: 2021-06-25T17:40:23.806310Z Last Updated: 2024-09-17T02:01:30.646Z Severity: HIGH (CVSS 7.4 CVSS:3.0/C:H/AC:H/PR:N/A:H/AV:L/I:H/UI:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Privilege Manager Problem Types: Gain Privileges Description: IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467047 - h
917. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184917
CVE ID: CVE-2020-4610 State: PUBLISHED Published: 2021-06-25T17:40:25.545500Z Last Updated: 2024-09-17T02:36:26.130Z Severity: HIGH (CVSS 7.4 CVSS:3.0/UI:N/S:U/C:H/AC:H/PR:N/A:H/AV:L/I:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Privilege Manager Problem Types: Gain Privileges Description: IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184919
CVE ID: CVE-2020-4611 State: PUBLISHED Published: 2020-09-22T13:55:41.280669Z Last Updated: 2024-09-17T01:41:35.019Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/C:H/S:U/AV:N/PR:L/I:H/UI:N/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Bypass Security Description: IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184922
CVE ID: CVE-2020-4612 State: PUBLISHED Published: 2020-09-22T13:55:41.717657Z Last Updated: 2024-09-16T16:22:49.556Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/UI:N/I:N/PR:L/AV:N/S:U/C:L/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184924
CVE ID: CVE-2020-4613 State: PUBLISHED Published: 2020-09-22T13:55:42.217532Z Last Updated: 2024-09-16T16:24:20.268Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/I:N/A:N/UI:N/AC:H/C:H/S:U/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184925
CVE ID: CVE-2020-4614 State: PUBLISHED Published: 2020-09-22T13:55:42.657876Z Last Updated: 2024-09-17T04:04:34.296Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/S:U/C:L/AC:H/A:N/UI:N/I:N/PR:N/RC:C/E:U/RL:O) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184927
CVE ID: CVE-2020-4615 State: PUBLISHED Published: 2020-09-22T13:55:43.091907Z Last Updated: 2024-09-16T23:22:01.605Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/S:C/C:L/AC:L/A:N/UI:R/I:L/PR:L/RC:C/E:H/RL:O) Vendors: IBM Products: Data Risk Manager Problem Types: Cross-Site Scripting Description: IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 -
4928. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184928
CVE ID: CVE-2020-4616 State: PUBLISHED Published: 2020-09-22T13:55:43.537758Z Last Updated: 2024-09-16T20:47:47.684Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/I:N/UI:N/A:N/PR:N/S:U/AV:N/AC:L/C:L/RL:O/RC:C/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184929
CVE ID: CVE-2020-4617 State: PUBLISHED Published: 2020-09-22T13:55:43.983540Z Last Updated: 2024-09-16T17:43:07.611Z Severity: HIGH (CVSS 7.1 CVSS:3.0/C:H/AC:L/AV:N/S:U/PR:N/A:N/UI:R/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Gain Access Description: IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 184930. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184930
CVE ID: CVE-2020-4618 State: PUBLISHED Published: 2020-09-22T13:55:44.424152Z Last Updated: 2024-09-16T18:19:41.686Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AC:L/C:N/S:U/AV:N/PR:H/I:L/A:H/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Data Risk Manager Problem Types: Denial of Service Description: IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184937
CVE ID: CVE-2020-4619 State: PUBLISHED Published: 2020-09-22T13:55:44.863601Z Last Updated: 2024-09-17T04:04:42.504Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/A:N/I:N/PR:L/AV:N/S:U/C:H/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6335281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184976