Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4546 State: PUBLISHED Published: 2020-09-02T18:25:25.260434Z Last Updated: 2024-09-16T16:29:04.755Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/A:N/I:L/AC:L/S:C/AV:N/C:L/RC:C/E:H/RL:O) Vendors: IBM Products: Engineering Workflow Management, Rational Team Concert, Rational DOORS Next Generation, Rational Quality Manager, Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM
UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6325343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183314
CVE ID: CVE-2020-4547 State: PUBLISHED Published: 2021-01-27T16:15:26.519672Z Last Updated: 2024-09-17T03:18:48.984Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/UI:R/AC:L/I:L/C:L/PR:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Engineering Workflow Management, Rational Engineering Lifecycle Manager, Rational Rhapsody Model Manager, Engineering Lifecycle Optimization, Engineering Test Management, Rational Rhapsody Design Manager, Rational Quality Manager, Rational Team Concert, Rational Collaborative Lifecycle Management, Rational DOORS Next Generation Problem Types: Gain Access Description: IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.
ess Description: IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6408694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183315
CVE ID: CVE-2020-4548 State: PUBLISHED Published: 2020-08-20T15:55:13.918148Z Last Updated: 2024-09-16T20:46:53.559Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/S:U/A:N/C:N/PR:L/I:L/AC:L/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Content Navigator Problem Types: Bypass Security Description: IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/62624
D: 183316. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6262411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183316
CVE ID: CVE-2020-4549 State: PUBLISHED Published: 2020-08-03T12:35:39.157103Z Last Updated: 2024-09-16T23:10:25.959Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AC:L/C:H/A:H/UI:R/I:H/S:U/PR:N/AV:L/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183317. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 -
83317. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183317
CVE ID: CVE-2020-4550 State: PUBLISHED Published: 2020-08-03T12:35:39.630640Z Last Updated: 2024-09-17T02:31:58.361Z Severity: HIGH (CVSS 7.8 CVSS:3.0/PR:N/AV:L/S:U/I:H/UI:R/A:H/C:H/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183318. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 183318. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183318
CVE ID: CVE-2020-4551 State: PUBLISHED Published: 2020-08-03T12:35:40.042603Z Last Updated: 2024-09-16T22:01:57.065Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/PR:N/S:U/I:H/A:H/UI:R/C:H/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183319. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 183319. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183319
CVE ID: CVE-2020-4552 State: PUBLISHED Published: 2020-08-03T12:35:40.476948Z Last Updated: 2024-09-16T17:38:03.936Z Severity: HIGH (CVSS 7.8 CVSS:3.0/I:H/S:U/UI:R/A:H/AV:L/PR:N/AC:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183320. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 -
83320. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183320
CVE ID: CVE-2020-4553 State: PUBLISHED Published: 2020-08-03T12:35:40.954987Z Last Updated: 2024-09-16T22:30:40.816Z Severity: HIGH (CVSS 7.8 CVSS:3.0/C:H/AC:L/AV:L/PR:N/UI:R/A:H/I:H/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183321. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 183321. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183321
CVE ID: CVE-2020-4554 State: PUBLISHED Published: 2020-08-03T12:35:41.375472Z Last Updated: 2024-09-16T17:18:46.885Z Severity: HIGH (CVSS 7.8 CVSS:3.0/PR:N/AV:L/A:H/UI:R/S:U/I:H/C:H/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: i2 Analyst Notebook Problem Types: Gain Privileges Description: IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
orce ID: 183322. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6254694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183322
CVE ID: CVE-2020-4555 State: PUBLISHED Published: 2020-12-21T17:50:28.202953Z Last Updated: 2024-09-17T04:29:10.320Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/S:U/UI:N/AV:N/PR:L/AC:L/I:L/C:L/A:L/E:U/RL:O/RC:C) Vendors: IBM Products: Financial Transaction Manager Problem Types: Gain Privileges Description: IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6388702 - https://www.ibm.com/support/pages/node/6388744 - https://www.ibm.com/support/pages/node
com/support/pages/node/6388702 - https://www.ibm.com/support/pages/node/6388744 - https://www.ibm.com/support/pages/node/6388708 - https://www.ibm.com/support/pages/node/6388706 - https://www.ibm.com/support/pages/node/6388704 - https://www.ibm.com/support/pages/node/6388722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183328
CVE ID: CVE-2020-4556 State: PUBLISHED Published: 2023-03-15T18:56:17.737Z Last Updated: 2025-02-26T20:17:10.156Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Financial Transaction Manager Problem Types: 525 Information Exposure Through Browser Caching Description: IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962117 - https://exchange.xforce.ibmcloud.com/
A ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183329
CVE ID: CVE-2020-4557 State: PUBLISHED Published: 2020-06-29T14:00:16.805405Z Last Updated: 2024-09-17T00:16:08.878Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/AC:L/I:L/A:N/S:C/AV:N/C:L/UI:R/RL:O/E:H/RC:C) Vendors: IBM Products: Business Process Manager, Business Automation Workflow Problem Types: Cross-Site Scripting Description: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183611. Additional A
nctionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183611. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6241338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183611
CVE ID: CVE-2020-4559 State: PUBLISHED Published: 2020-08-28T14:35:20.136124Z Last Updated: 2024-09-17T00:46:51.843Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/PR:N/AV:N/C:N/S:U/AC:H/A:H/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Denial of Service Description: IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183613
CVE ID: CVE-2020-4560 State: PUBLISHED Published: 2020-08-03T12:35:41.849120Z Last Updated: 2024-09-17T00:36:57.622Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/C:L/AC:H/PR:N/AV:N/A:N/UI:R/I:L/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Financial Transaction Manager Problem Types: Cross-Site Scripting Description: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255190 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183900
CVE ID: CVE-2020-4561 State: PUBLISHED Published: 2021-05-31T15:10:44.659014Z Last Updated: 2024-09-17T03:39:02.327Z Severity: CRITICAL (CVSS 10 CVSS:3.0/PR:N/C:H/I:H/S:C/AC:L/A:H/UI:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulne
ram Container: References: - https://www.ibm.com/support/pages/node/6451705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183903 - https://security.netapp.com/advisory/ntap-20210622-0004/
CVE ID: CVE-2020-4562 State: PUBLISHED Published: 2021-04-26T16:30:42.449459Z Last Updated: 2024-09-16T21:08:06.476Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/UI:N/I:N/S:U/A:N/AV:N/AC:L/C:L/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Planning Analytics Problem Types: Obtain Information Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6446699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183904
CVE ID: CVE-2020-4564 State: PUBLISHED Published: 2020-10-20T14:15:32.747465Z Last Updated: 2024-09-16T16:38:35.227Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/A:N/AV:N/AC:L/S:C/I:L/PR:L/UI:R/E:H/RL:O/RC:C) Vendors: IBM Products: Sterling B2B Integrator, Sterling File Gateway Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1839
the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183933. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6349539 - https://www.ibm.com/support/pages/node/6349533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183933
CVE ID: CVE-2020-4565 State: PUBLISHED Published: 2020-06-26T13:45:31.317006Z Last Updated: 2024-09-17T02:00:42.299Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/AC:H/UI:N/I:N/C:H/PR:N/A:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure communications being used between the application and server. IBM X-Force ID: 183935. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6238920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/183935
CVE ID: CVE-2020-4566 State: PUBLISHED Published: 2020-11-16T16:40:33.967550Z Last Updated: 2024-09-17T03:39:01.788Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/UI:N/AC:L/S:U/I:N/A:N/PR:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6367975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184083
CVE ID: CVE-2020-4567 State: PUBLISHED Published: 2020-07-29T14:05:30.013825Z Last Updated: 2024-09-16T17:23:14.716Z Severity: HIGH (CVSS 8.6 CVSS:3.0/UI:N/PR:N/S:C/A:N/AC:L/C:H/AV:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 184156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184156
CVE ID: CVE-2020-4568 State: PUBLISHED Published: 2020-11-10T14:50:26.845951Z Last Updated: 2024-09-17T03:08:02.461Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/PR:L/UI:N/C:H/S:C/AV:N/I:N/A:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184157. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6365305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184157
CVE ID: CVE-2020-4569 State: PUBLISHED Published: 2020-07-29T14:05:30.525526Z Last Updated: 2024-09-17T00:30:57.626Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/UI:N/PR:N/AV:N/I:L/C:L/AC:L/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Bypass Security Description: IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 184158. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184158
CVE ID: CVE-2020-4572 State: PUBLISHED Published: 2020-07-29T14:05:31.005899Z Last Updated: 2024-09-16T23:21:45.542Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/A:N/AV:N/I:N/C:L/PR:N/UI:N/S:U/RC:C/RL:O/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184179. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://ex
tional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184179
CVE ID: CVE-2020-4573 State: PUBLISHED Published: 2020-07-29T14:05:31.458298Z Last Updated: 2024-09-17T03:27:54.166Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:L/I:N/AV:N/A:N/AC:L/S:U/UI:N/PR:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184180
CVE ID: CVE-2020-4574 State: PUBLISHED Published: 2020-07-29T14:05:31.946939Z Last Updated: 2024-09-17T02:16:24.122Z Severity: HIGH (CVSS 7.4 CVSS:3.0/S:C/UI:R/PR:N/AV:N/I:N/C:H/AC:L/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 184181. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6253781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184181
CVE ID: CVE-2020-4575 State: PUBLISHED Published: 2020-08-27T12:40:34.014636Z Last Updated: 2024-09-16T19:35:46.352Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/S:C/I:L/A:N/C:L/AV:N/PR:N/UI:R/AC:H/RC:C/RL:O/E:H) Vendors: IBM Products: WebSphere Virtual Enterprise, WebSphere Application Server ND Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6323293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
r: References: - https://www.ibm.com/support/pages/node/6323293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184363
CVE ID: CVE-2020-4576 State: PUBLISHED Published: 2020-10-01T15:37:08.776550Z Last Updated: 2024-09-17T03:38:54.376Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/A:N/C:L/UI:N/I:N/S:U/PR:N/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 184428. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6339807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184428
CVE ID: CVE-2020-4578 State: PUBLISHED Published: 2020-09-10T16:50:13.965269Z Last Updated: 2024-09-16T17:37:38.647Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/S:C/AV:N/AC:L/A:N/UI:R/I:L/PR:L/RL:O/E:H/RC:C) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184433. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.c
sted session. IBM X-Force ID: 184433. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6328895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184433
CVE ID: CVE-2020-4579 State: PUBLISHED Published: 2020-09-21T14:55:23.805959Z Last Updated: 2024-09-16T17:27:54.485Z Severity: HIGH (CVSS 7.5 CVSS:3.0/UI:N/AC:L/C:N/S:U/PR:N/I:N/A:H/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: DataPower Gateway Problem Types: Denial of Service Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6334703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/184438