Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4308 State: PUBLISHED Published: 2019-08-20T18:25:26.552896Z Last Updated: 2024-09-17T00:40:47.653Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/S:U/PR:L/I:N/UI:N/A:N/C:L/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: Emptoris Sourcing, Contract Management, Emptoris Spend Analysis Problem Types: Obtain Information Description: IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?u
e ID: 161034. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161034
CVE ID: CVE-2019-4309 State: PUBLISHED Published: 2019-10-28T23:36:08.786236Z Last Updated: 2024-09-16T20:07:11.978Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/C:H/UI:N/AV:L/I:N/PR:N/S:C/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161035
CVE ID: CVE-2019-4310 State: PUBLISHED Published: 2019-08-20T18:25:26.611074Z Last Updated: 2024-09-17T01:31:34.577Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/A:N/C:H/PR:N/I:N/UI:N/AV:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161036
CVE ID: CVE-2019-4311 State: PUBLISHED Published: 2019-10-28T23:36:09.271292Z Last Updated: 2024-09-17T02:32:40.452Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AV:N/C:L/UI:N/PR:N/I:N/AC:L/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1098069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161037
CVE ID: CVE-2019-4314 State: PUBLISHED Published: 2019-10-28T23:36:09.751654Z Last Updated: 2024-09-16T16:52:53.458Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/PR:N/S:U/AC:H/A:N/AV:N/UI:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161041
CVE ID: CVE-2019-4321 State: PUBLISHED Published: 2019-09-05T14:50:15.636266Z Last Updated: 2024-09-16T20:11:57.955Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/AV:N/AC:H/C:H/S:U/A:N/PR:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Intelligent Operations Center Problem Types: Obtain Information Description: IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201. Additional Analyst Notes: - CVE Program Container:
er for attackers to compromise user accounts. IBM X-Force ID: 161201. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10885901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161201
CVE ID: CVE-2019-4322 State: PUBLISHED Published: 2019-07-01T15:05:38.166913Z Last Updated: 2024-09-17T04:03:54.544Z Severity: HIGH (CVSS 8.4 CVSS:3.0/S:U/A:H/UI:N/I:H/AC:L/AV:L/PR:N/C:H/RC:C/RL:O/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 161202. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884444 - https://exchange.xforce.i
CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161202 - http://www.securityfocus.com/bid/109002
CVE ID: CVE-2019-4323 State: PUBLISHED Published: 2020-07-07T14:49:46 Last Updated: 2024-08-04T19:33:37.933Z Vendors: n/a Products: "HCL AppScan Enterprise" Problem Types: "Clickjacking" Description: "HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572 - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572&sys_kb_id=3668a078dbb9101855f38d6d13961955
CVE ID: CVE-2019-4324 State: PUBLISHED Published: 2020-07-07T14:45:17 Last Updated: 2024-08-04T19:33:38.134Z Vendors: n/a Products: "HCL AppScan Enterprise" Problem Types: "Cross-site scripting" Description: "HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080574 - https://support.hcltechsw.com/csm?id=kb_article&sys_id=cd5030b4dbbd101855f38d6d13961958
CVE ID: CVE-2019-4325 State: PUBLISHED Published: 2020-10-06T17:18:43 Last Updated: 2024-08-04T19:33:37.899Z Vendors: n/a Products: "HCL AppScan Enterprise " Problem Types: "Security Misconfiguration" Description: "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082503
CVE ID: CVE-2019-4326 State: PUBLISHED Published: 2020-10-06T17:22:45 Last Updated: 2024-08-04T19:33:38.195Z Vendors: n/a Products: "HCL AppScan Enterprise " Problem Types: "Security Misconfiguration" Description: "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082505
CVE ID: CVE-2019-4327 State: PUBLISHED Published: 2020-04-21T18:13:45 Last Updated: 2024-08-04T19:33:37.940Z Vendors: n/a Products: "HCL AppScan Enterprise Edition" Problem Types: "Broken authentication" Description: "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078222
CVE ID: CVE-2019-4329 State: PUBLISHED Published: 2019-10-28T23:36:10.249378Z Last Updated: 2024-09-16T19:47:09.207Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/C:N/UI:N/A:N/AC:L/S:U/PR:L/I:L/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Bypass Security Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096906 - https://exchange.xforce.ibmcl
s: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161209
CVE ID: CVE-2019-4330 State: PUBLISHED Published: 2019-10-28T23:36:10.730021Z Last Updated: 2024-09-16T20:37:40.736Z Severity: LOW (CVSS 3.1 CVSS:3.0/PR:N/I:N/AC:H/S:U/A:N/AV:N/C:L/UI:R/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096384 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/1096384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161210
CVE ID: CVE-2019-4334 State: PUBLISHED Published: 2019-11-09T01:41:07.261819Z Last Updated: 2024-09-16T23:10:34.273Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/A:N/S:U/AC:L/AV:N/PR:L/UI:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1074144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161271
CVE ID: CVE-2019-4335 State: PUBLISHED Published: 2019-12-30T15:35:21.315152Z Last Updated: 2024-09-17T00:40:48.590Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/UI:N/S:U/C:H/A:N/PR:N/I:N/RL:O/E:U/RC:C) Vendors: IBM Products: Watson Studio Local Problem Types: Obtain Information Description: IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161413
CVE ID: CVE-2019-4336 State: PUBLISHED Published: 2019-07-01T15:05:38.219163Z Last Updated: 2024-09-17T02:41:55.472Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:N/C:H/AV:N/AC:L/I:N/UI:N/S:U/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161411. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1614
es: - http://www.ibm.com/support/docview.wss?uid=ibm10884848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161411
CVE ID: CVE-2019-4337 State: PUBLISHED Published: 2019-07-01T15:05:38.271689Z Last Updated: 2024-09-17T03:22:33.163Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/A:N/I:N/UI:N/PR:N/C:L/AC:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Obtain Information Description: IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes. IBM X-Force ID: 161412. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161412
CVE ID: CVE-2019-4338 State: PUBLISHED Published: 2019-08-20T19:30:25.480392Z Last Updated: 2024-09-16T20:53:00.540Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/I:N/PR:N/UI:N/AV:N/C:N/AC:L/S:U/RL:O/RC:C/E:U) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Denial of Service Description: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960858 - https://excha
st Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161417
CVE ID: CVE-2019-4339 State: PUBLISHED Published: 2019-10-28T23:36:11.155539Z Last Updated: 2024-09-16T21:57:39.810Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/C:H/UI:N/A:N/AC:H/S:U/PR:N/I:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1096924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161418
CVE ID: CVE-2019-4340 State: PUBLISHED Published: 2019-08-20T19:30:25.528160Z Last Updated: 2024-09-17T03:14:03.306Z Severity: HIGH (CVSS 7.1 CVSS:3.0/S:U/C:H/AC:L/AV:N/UI:N/PR:L/I:N/A:L/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?u
e ID: 161419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10960856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161419
CVE ID: CVE-2019-4342 State: PUBLISHED Published: 2019-09-17T19:05:24.031339Z Last Updated: 2024-09-17T01:12:20.635Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/S:C/I:L/PR:L/C:L/UI:R/A:N/RC:C/E:H/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 161421. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073530 - h
421. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1073530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161421 - https://security.netapp.com/advisory/ntap-20191009-0001/
CVE ID: CVE-2019-4343 State: PUBLISHED Published: 2019-12-30T15:35:21.805422Z Last Updated: 2024-09-16T22:51:53.922Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/PR:L/I:N/S:U/A:N/C:H/UI:N/AC:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private information. An attacker could exploit this vulnerability to access content that should be restricted. IBM X-Force ID: 161422. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146424 - https://exchange.xforce.ibmc
es: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161422 - https://security.netapp.com/advisory/ntap-20200110-0002/
CVE ID: CVE-2019-4349 State: PUBLISHED Published: 2020-11-03T13:25:20.872767Z Last Updated: 2024-09-17T02:16:39.775Z Severity: LOW (CVSS 3.5 CVSS:3.0/S:U/C:L/AV:P/UI:N/AC:L/PR:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6358059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161486
CVE ID: CVE-2019-4351 State: PUBLISHED Published: 2022-02-16T17:00:17.556417Z Last Updated: 2024-09-17T01:01:19.961Z Severity: LOW (CVSS 2.1 CVSS:3.0/AC:L/PR:L/C:L/I:N/AV:P/UI:N/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6556820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161493
CVE ID: CVE-2019-4352 State: PUBLISHED Published: 2022-02-16T17:00:19.529667Z Last Updated: 2024-09-17T03:34:05.943Z Severity: LOW (CVSS 2.4 CVSS:3.0/A:N/UI:N/S:U/I:N/C:L/AC:L/PR:N/AV:P/RL:O/RC:C/E:U) Vendors: IBM Products: Maximo Anywhere Problem Types: Obtain Information Description: IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6556808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161494
CVE ID: CVE-2019-4357 State: PUBLISHED Published: 2019-07-01T15:05:38.323179Z Last Updated: 2024-09-17T01:27:00.294Z Severity: HIGH (CVSS 8.2 CVSS:3.0/A:H/S:C/I:H/UI:N/C:H/PR:H/AC:L/AV:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Gain Privileges Description: When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667, Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886111 - https://exchange.xforce.ibmcloud.com/vulnerab
er: References: - http://www.ibm.com/support/docview.wss?uid=ibm10886111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161667 - http://www.securityfocus.com/bid/109003
CVE ID: CVE-2019-4364 State: PUBLISHED Published: 2019-06-19T13:30:19.753226Z Last Updated: 2024-09-16T18:39:05.036Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/S:U/C:L/I:L/UI:R/A:L/AC:L/AV:N/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Privileges Description: IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161680 - http://www.securityfocus.com/bid/10891
s?uid=ibm10887557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161680 - http://www.securityfocus.com/bid/108910
CVE ID: CVE-2019-4366 State: PUBLISHED Published: 2020-08-03T12:35:36.114437Z Last Updated: 2024-09-16T20:06:51.978Z Severity: LOW (CVSS 2.9 CVSS:3.0/PR:N/AV:L/UI:N/A:N/I:N/S:U/C:L/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/161748
CVE ID: CVE-2019-4369 State: REJECTED Published: 2019-06-28T16:15:16 Last Updated: 2020-10-14T12:55:12 Description: No description available.
CVE ID: CVE-2019-4377 State: PUBLISHED Published: 2019-06-25T15:45:30.240286Z Last Updated: 2024-09-17T00:20:50.196Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AV:N/C:L/S:U/A:N/PR:L/UI:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162083 - http://www.securityfocus.com/bid/10891
s?uid=ibm10887853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162083 - http://www.securityfocus.com/bid/108915
CVE ID: CVE-2019-4378 State: PUBLISHED Published: 2019-09-26T15:05:31.039884Z Last Updated: 2024-09-17T02:32:24.120Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:N/A:H/AC:H/S:U/UI:N/AV:N/I:N/PR:L/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authenticated and authorized user using specially crafted PCF messages. IBM X-Force ID: 162084. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/support/pages/node/886885 - https://exc
yst Notes: - CVE Program Container: References: - https://supportcontent.ibm.com/support/pages/node/886885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162084
CVE ID: CVE-2019-4381 State: PUBLISHED Published: 2019-06-14T14:45:18.068285Z Last Updated: 2024-09-16T17:38:19.589Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/I:N/AC:H/UI:N/C:H/PR:N/A:N/S:C/RL:O/RC:C/E:U) Vendors: IBM Products: i Problem Types: Obtain Information Description: IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887369 - https://exchange.xfo
s: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/162159 - http://www.securityfocus.com/bid/108808