Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1675 State: PUBLISHED Published: 2019-02-04T21:00:00Z Last Updated: 2024-09-17T03:14:39.177Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Tivoli Application Dependency Discovery Manager Problem Types: Obtain Information Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10742403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145110
CVE ID: CVE-2018-1676 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-16T18:28:54.443Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Planning Analytics Local Problem Types: Cross-Site Scripting Description: IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145118. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?ui
e ID: 145118. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145118
CVE ID: CVE-2018-1677 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T20:17:29.202Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:H/AC:H/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DataPower Gateways Problem Types: Denial of Service Description: IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145171 - http:/
alyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145171 - http://www.securityfocus.com/bid/106284 - https://www.ibm.com/support/docview.wss?uid=ibm10744555
CVE ID: CVE-2018-1679 State: PUBLISHED Published: 2018-07-20T16:00:00Z Last Updated: 2024-09-16T16:22:58.882Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 145180. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145180 - http://www.ibm.com/support/docview.wss?uid=ibm10716747 - http://www.s
hange.xforce.ibmcloud.com/vulnerabilities/145180 - http://www.ibm.com/support/docview.wss?uid=ibm10716747 - http://www.securityfocus.com/bid/104927
CVE ID: CVE-2018-1680 State: PUBLISHED Published: 2019-04-02T13:20:33.796848Z Last Updated: 2024-09-16T18:44:47.654Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:H/UI:N/PR:N/S:U/AC:H/AV:N/A:N/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnera
ner: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145236
CVE ID: CVE-2018-1682 State: PUBLISHED Published: 2019-12-30T15:35:20.872127Z Last Updated: 2024-09-16T23:51:02.703Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/UI:N/AV:N/I:N/PR:N/C:L/A:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Watson Studio Local Problem Types: Obtain Information Description: IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1146388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145238
CVE ID: CVE-2018-1683 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-16T19:56:22.708Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB communication. IBM X-Force ID: 145455. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145455 - http://www.securitytracker.com/id/1041720 - https://www.ibm.com/support/docview.wss?uid=ibm107165
lnerabilities/145455 - http://www.securitytracker.com/id/1041720 - https://www.ibm.com/support/docview.wss?uid=ibm10716533
CVE ID: CVE-2018-1684 State: PUBLISHED Published: 2018-11-09T00:00:00Z Last Updated: 2024-09-16T22:26:38.249Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X-Force ID: 145456. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145456 - https://www.ibm.com/support/docview.wss?uid=ibm10734297
CVE ID: CVE-2018-1685 State: PUBLISHED Published: 2018-09-21T13:00:00 Last Updated: 2024-08-05T04:07:44.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user to read any file on the system. IBM X-Force ID: 145502. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041671 - http://www.securityfocus.com/bid/105395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145502 - https://www.ibm.com/support/docview.wss?uid=ibm10729979
CVE ID: CVE-2018-1686 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-16T16:19:07.337Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145505. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vu
rce ID: 145505. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145505 - https://www.ibm.com/support/docview.wss?uid=ibm10728865
CVE ID: CVE-2018-1688 State: PUBLISHED Published: 2019-03-14T22:00:00Z Last Updated: 2024-09-16T16:58:12.505Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145509. Additional Analyst Notes: - CVE Program Co
g to credentials disclosure within a trusted session. IBM X-Force ID: 145509. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145509 - http://www.securityfocus.com/bid/107435
CVE ID: CVE-2018-1690 State: PUBLISHED Published: 2018-08-07T13:00:00Z Last Updated: 2024-09-16T20:21:30.182Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rhapsody Model Manager Problem Types: Cross-Site Scripting Description: IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145510. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/
. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145510 - http://www.ibm.com/support/docview.wss?uid=ibm10718345
CVE ID: CVE-2018-1691 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-17T04:09:18.483Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145582. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 145582. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145582 - http://www.ibm.com/support/docview.wss?uid=ibm10733078
CVE ID: CVE-2018-1692 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T19:20:20.638Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145583. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 145583. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145583
CVE ID: CVE-2018-1694 State: PUBLISHED Published: 2018-11-06T16:00:00Z Last Updated: 2024-09-17T00:40:43.367Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert, Rational Software Architect Design Manager, Rational DOORS Next Generation, Rational Collaborative Lifecycle Management, Rational Rhapsody Design Manager, Rational Quality Manager, Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM
5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive i
re to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145609 - http://www.ibm.com/support/docview.wss?uid=ibm10738301
CVE ID: CVE-2018-1695 State: PUBLISHED Published: 2018-09-06T14:00:00Z Last Updated: 2024-09-16T19:00:23.347Z Severity: HIGH (CVSS 7.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 145769. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10716523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145769 - http://www.securitytracker.com/id/1041643
CVE ID: CVE-2018-1697 State: PUBLISHED Published: 2018-12-05T17:00:00Z Last Updated: 2024-09-16T20:52:59.912Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request. IBM X-Force ID: 145966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10737457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145966
CVE ID: CVE-2018-1698 State: PUBLISHED Published: 2018-09-13T15:00:00Z Last Updated: 2024-09-16T20:46:50.829Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information from error messages. IBM X-Force ID: 145967. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105343 - https://www.ibm.com/support/docview.wss?uid=ibm10728857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/145967
CVE ID: CVE-2018-1699 State: PUBLISHED Published: 2018-08-24T11:00:00Z Last Updated: 2024-09-16T18:03:26.697Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Data Manipulation Description: IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145968. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145968 - http://www.securit
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145968 - http://www.securityfocus.com/bid/105189 - https://www.ibm.com/support/docview.wss?uid=ibm10725805
CVE ID: CVE-2018-1701 State: PUBLISHED Published: 2019-02-15T20:00:00Z Last Updated: 2024-09-17T01:35:50.582Z Severity: HIGH (CVSS 8.5 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145970 - https://www.ibm.com/support/docview.wss?uid=ibm1073
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/145970 - https://www.ibm.com/support/docview.wss?uid=ibm10730555
CVE ID: CVE-2018-1702 State: PUBLISHED Published: 2018-09-28T13:00:00Z Last Updated: 2024-09-16T23:46:49.215Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Symphony, Platform Symphony Problem Types: Obtain Information Description: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 146189. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.
ry resources. IBM X-Force ID: 146189. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/146189 - https://www.ibm.com/support/docview.wss?uid=ibm10719659
CVE ID: CVE-2018-1704 State: PUBLISHED Published: 2018-09-28T13:00:00Z Last Updated: 2024-09-16T17:13:52.176Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Platform Symphony, Spectrum Symphony Problem Types: Gain Access Description: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This c
nerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 146339. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/146339 - https://www.ibm.com/support/docview.wss?uid=ibm10719671
CVE ID: CVE-2018-1705 State: PUBLISHED Published: 2018-08-28T11:00:00Z Last Updated: 2024-09-16T16:17:42.804Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Platform Symphony, Spectrum Symphony Problem Types: Obtain Information Description: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information. IBM X-Force ID: 146340. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10719665 - https://exchange.xforce.ibm
E Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10719665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/146340
CVE ID: CVE-2018-1706 State: PUBLISHED Published: 2018-10-11T12:00:00Z Last Updated: 2024-09-17T00:46:44.106Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Spectrum Symphony Problem Types: Cross-Site Scripting Description: IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10719669 - http
onal Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10719669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/146341
CVE ID: CVE-2018-1708 State: PUBLISHED Published: 2018-10-11T12:00:00Z Last Updated: 2024-09-17T03:03:29.869Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Symphony Problem Types: Obtain Information Description: IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/146343 - https://www.ibm.com/support/docview.wss?uid=ibm10719667
CVE ID: CVE-2018-1710 State: PUBLISHED Published: 2018-09-21T13:00:00Z Last Updated: 2024-09-16T20:27:34.137Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10729981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1463
s: - https://www.ibm.com/support/docview.wss?uid=ibm10729981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/146364 - http://www.securityfocus.com/bid/105391 - https://usn.ubuntu.com/3906-2/
CVE ID: CVE-2018-1711 State: PUBLISHED Published: 2018-09-21T13:00:00Z Last Updated: 2024-09-17T01:21:12.869Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 146369. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105390 - http://www.securitytracker.com/id/1042175 - https://www.ibm.com/support/docvi
http://www.securityfocus.com/bid/105390 - http://www.securitytracker.com/id/1042175 - https://www.ibm.com/support/docview.wss?uid=ibm10729983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/146369
CVE ID: CVE-2018-1712 State: PUBLISHED Published: 2018-08-16T19:00:00Z Last Updated: 2024-09-16T23:26:46.961Z Severity: HIGH (CVSS 8.6 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/146370 - https://www-01.ibm.com/s
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/146370 - https://www-01.ibm.com/support/docview.wss?uid=ibm10716169