Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4817 State: PUBLISHED Published: 2012-09-14T23:00:00 Last Updated: 2024-08-06T20:50:16.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027531 - http://www.ibm.com/support/docview.wss?uid=isg1IV12169 - http://osvdb.org/85427 - http://secunia.com/advisories/50619 - http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc - http://www.ib
ttp://secunia.com/advisories/50619 - http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV17855 - http://www.ibm.com/support/docview.wss?uid=isg1IV10327 - http://www.ibm.com/support/docview.wss?uid=isg1IV26436 - http://www.securityfocus.com/bid/55546 - http://www.ibm.com/support/docview.wss?uid=isg1IV11629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78431
CVE ID: CVE-2012-4818 State: PUBLISHED Published: 2020-08-28T20:01:53 Last Updated: 2024-08-06T20:50:17.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78651 - https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-
.xforce.ibmcloud.com/vulnerabilities/78651 - https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-may-allow-access-to-sensitive-data-stored-on-ibm-infosphere-information-server-cve-2012-4818/?lnk=hm
CVE ID: CVE-2012-4819 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T20:50:17.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnera
: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78666
CVE ID: CVE-2012-4820 State: PUBLISHED Published: 2013-01-11T00:00:00 Last Updated: 2024-08-06T20:50:17.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allo
vice Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616616 - http://www-01.ibm.com/support/docview.wss?uid=swg21616594 - http://www-01.ibm.com/support/docview.wss?uid=swg21616617 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www
16617 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.securityfocus.com/bid/55495 - http://www-01.ibm.com/support/docview.wss?uid=swg21631786 - http://www-01.ibm.com/support/docview.wss?uid=swg21615800 - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - https://www-304.ibm.com/support/docview.wss?uid=swg21616546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78764 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.ht
ulnerabilities/78764 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html - http://secunia.com/advisories/51328 - http://www-01.ibm.com/support/docview.wss?uid=swg21616708 - http://secunia.com/advisories/51634 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654 - http://www-01.ibm.com/support/docview.wss?uid=swg21615705 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://secunia.com/advisories/51393 - http://secunia.com/advisories/51326
CVE ID: CVE-2012-4821 State: PUBLISHED Published: 2013-01-11T00:00:00 Last Updated: 2024-08-06T20:50:16.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execut
er, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21616616 - http://www-01.ibm.com/support/docview.wss?uid=swg21616594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78765 - http://www-01.ibm.com/support/docview.wss?uid=swg21616617 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.co
tp://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV29659 - http://www.securityfocus.com/bid/55495 - http://www-01.ibm.com/support/docview.wss?uid=swg21615800 - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - https://www-304.ibm.com/support/docview.wss?uid=swg21616546 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616708 - http://secunia.com/advisories/51634 - http://www-01.ibm.com/support/docview.wss?uid=swg21615705 - http://secunia.com/advisories/51326
CVE ID: CVE-2012-4822 State: PUBLISHED Published: 2013-01-11T00:00:00 Last Updated: 2024-08-06T20:50:16.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execut
er, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616616 - http://www-01.ibm.com/support/docview.wss?uid=swg21616594 - http://www-01.ibm.com/support/docview.wss?uid=swg21616617 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://rhn.redh
- http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV29665 - http://www.securityfocus.com/bid/55495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78766 - http://www-01.ibm.com/support/docview.wss?uid=swg21631786 - http://www-01.ibm.com/support/docview.wss?uid=swg21615800 - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - https://www-304.ibm.com/support/docview.wss?uid=swg21616546 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html -
uid=swg21616546 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html - http://secunia.com/advisories/51328 - http://www-01.ibm.com/support/docview.wss?uid=swg21616708 - http://secunia.com/advisories/51634 - http://www-01.ibm.com/support/docview.wss?uid=swg21615705 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://secunia.com/advisories/51393 - http://secunia.com/advisories/51326
CVE ID: CVE-2012-4823 State: PUBLISHED Published: 2013-01-11T00:00:00 Last Updated: 2024-08-06T20:50:17.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrar
vice Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616616 - http://www-01.ibm.com/support/docview.wss?uid=swg21616594 - http://www-01.ibm.com/support/docview.wss?uid=swg21616617 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://seclists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://rhn.redhat.com/errat
clists.org/bugtraq/2012/Sep/38 - http://www-01.ibm.com/support/docview.wss?uid=swg21616652 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV29687 - http://www.securityfocus.com/bid/55495 - http://www-01.ibm.com/support/docview.wss?uid=swg21615800 - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - https://www-304.ibm.com/support/docview.wss?uid=swg21616546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78767 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616708 - http://secunia.com/advisories/51634 - http://www-01.ibm.com/sup
p://www-01.ibm.com/support/docview.wss?uid=swg21616708 - http://secunia.com/advisories/51634 - http://www-01.ibm.com/support/docview.wss?uid=swg21615705 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://secunia.com/advisories/51326
CVE ID: CVE-2012-4824 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-16T23:11:26.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html - http://www-01.ibm.com/support/docview.wss?uid=swg21612229
CVE ID: CVE-2012-4825 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-16T23:56:40.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html - http://www-01.ibm.com/support/docview.wss?uid=swg21612229
CVE ID: CVE-2012-4826 State: PUBLISHED Published: 2012-10-20T10:00:00 Last Updated: 2024-08-06T20:50:17.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21450666 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC87192 - http://www-01.ibm.com/support/docview.wss?uid=swg21614536 - http://www-01.ibm.com/s
upport/docview.wss?uid=swg1IC87192 - http://www-01.ibm.com/support/docview.wss?uid=swg21614536 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765 - http://www.securityfocus.com/bid/56133 - http://osvdb.org/86414 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782
CVE ID: CVE-2012-4829 State: PUBLISHED Published: 2013-04-16T10:00:00 Last Updated: 2024-08-06T20:50:17.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78860 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004323
CVE ID: CVE-2012-4830 State: PUBLISHED Published: 2012-10-01T18:00:00 Last Updated: 2024-08-06T20:50:17.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6 allows remote attackers to obtain users' personal data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85868 - http://www-01.ibm.com/support/docview.wss?uid=swg21612484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78867 - http://www-01.ibm.com/support/docview.wss?uid=swg1SE53160
CVE ID: CVE-2012-4832 State: PUBLISHED Published: 2013-01-31T11:00:00 Last Updated: 2024-08-06T20:50:17.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21623501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78906
CVE ID: CVE-2012-4833 State: PUBLISHED Published: 2012-10-01T18:00:00 Last Updated: 2024-08-06T20:50:17.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78907 - http://www.ibm.com/support/docview.wss?uid=isg1IV28756 - http://www.ibm.com/support/docview.wss?uid=isg1IV28754 - http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc - http://www.ibm.com/support/docview.wss?u
1IV28754 - http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV28151 - http://secunia.com/advisories/50708 - http://www.securityfocus.com/bid/55726 - http://www.securitytracker.com/id?1027586 - http://www.ibm.com/support/docview.wss?uid=isg1IV28749
CVE ID: CVE-2012-4834 State: PUBLISHED Published: 2012-11-30T19:00:00 Last Updated: 2024-08-06T20:50:17.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51281 - http://www.ibm.com/support/docview.wss?uid=swg24033155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78914 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_f
com/vulnerabilities/78914 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344 - http://www.ibm.com/support/docview.wss?uid=swg21617713 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354
CVE ID: CVE-2012-4835 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T20:50:17.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78917
CVE ID: CVE-2012-4836 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T20:50:17.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of stored data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697 - https://exchange.xforce.ibmcloud.co
ew.wss?uid=swg24034373 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78918
CVE ID: CVE-2012-4837 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T20:50:17.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78919 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697
CVE ID: CVE-2012-4838 State: PUBLISHED Published: 2012-12-08T15:00:00 Last Updated: 2024-08-06T20:50:16.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_im
ww.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79020 - https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001
CVE ID: CVE-2012-4839 State: PUBLISHED Published: 2012-12-20T11:00:00 Last Updated: 2024-08-06T20:50:17.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21620342 - http://www.securitytracker.com/id?1027889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79068
CVE ID: CVE-2012-4840 State: PUBLISHED Published: 2013-03-02T21:00:00 Last Updated: 2024-08-06T20:50:17.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79116 - http://www-01.ibm.com/support/docview.wss?uid=swg24034373 - http://www-01.ibm.com/support/docview.wss?uid=swg21626697
CVE ID: CVE-2012-4841 State: PUBLISHED Published: 2012-11-29T11:00:00 Last Updated: 2024-08-06T20:50:16.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79125 - http://www.securityfocus.com/bid/56649 - http://www-01.ibm.com/support/docview.wss?uid=swg21616746
CVE ID: CVE-2012-4842 State: PUBLISHED Published: 2013-02-27T21:00:00 Last Updated: 2024-08-06T20:50:17.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79232 - http://www-01.ibm.com/support/docview.wss?uid=swg21614077