Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1897 State: PUBLISHED Published: 2018-11-30T15:00:00Z Last Updated: 2024-09-16T22:56:05.570Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 152462. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106060 - http://www.ibm.com/support/docview.wss?uid=ibm10737295 - https:
References: - http://www.securityfocus.com/bid/106060 - http://www.ibm.com/support/docview.wss?uid=ibm10737295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152462 - http://www.securitytracker.com/id/1042165
CVE ID: CVE-2018-1899 State: PUBLISHED Published: 2019-03-05T18:00:00Z Last Updated: 2024-09-16T20:47:56.611Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:A/C:N/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Access Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10744029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152528
CVE ID: CVE-2018-1900 State: PUBLISHED Published: 2018-12-11T16:00:00Z Last Updated: 2024-09-17T01:01:09.766Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Curam Social Program Management Problem Types: Cross-Site Scripting Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152529. Additional Analyst Notes: - CVE Program Container: References: - htt
e within a trusted session. IBM X-Force ID: 152529. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10739035 - http://www.securityfocus.com/bid/106189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152529
CVE ID: CVE-2018-1901 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T19:55:40.285Z Severity: MEDIUM (CVSS 5 CVSS:3.0/A:L/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. IBM X-Force ID: 152530. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152530 - https://www.ibm.com/support/docview.wss?uid=ibm10738727
CVE ID: CVE-2018-1902 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-16T20:21:33.754Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: File Manipulation Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM X-Force ID: 152531. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10795115 - http://www.securityfocus.com/bid/107383 - https://exchange.xforce.ibmcloud.co
.com/support/docview.wss?uid=ibm10795115 - http://www.securityfocus.com/bid/107383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152531
CVE ID: CVE-2018-1903 State: PUBLISHED Published: 2019-04-10T14:30:27.394161Z Last Updated: 2024-09-17T03:23:03.691Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/C:H/UI:N/AC:L/AV:L/I:H/A:H/S:U/PR:H/E:U/RL:O/RC:C) Vendors: IBM Products: Sterling Connect:Direct for UNIX Problem Types: Gain Privileges Description: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10875386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152532
CVE ID: CVE-2018-1904 State: PUBLISHED Published: 2018-12-11T16:00:00Z Last Updated: 2024-09-17T02:48:05.744Z Severity: HIGH (CVSS 8.1 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with a serialized object from untrusted sources. IBM X-Force ID: 152533. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106193 - https://www-01.ibm.com/support/docview.wss?uid=ibm10738735 - https://exchange.
http://www.securityfocus.com/bid/106193 - https://www-01.ibm.com/support/docview.wss?uid=ibm10738735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152533
CVE ID: CVE-2018-1905 State: PUBLISHED Published: 2018-11-26T17:00:00Z Last Updated: 2024-09-16T23:10:20.718Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152534. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106030 - https://www.ibm.co
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106030 - https://www.ibm.com/support/docview.wss?uid=ibm10738721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152534
CVE ID: CVE-2018-1906 State: PUBLISHED Published: 2019-04-02T13:20:33.880696Z Last Updated: 2024-09-17T00:35:41.134Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/UI:N/C:L/AC:L/S:U/PR:L/I:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152663 - http://www.securityfocus.com/bid/107735
CVE ID: CVE-2018-1908 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T22:55:49.125Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation with Automation Anywhere Problem Types: Cross-Site Scripting Description: IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152671. Additional Analyst Notes: - CVE Program Container: References:
losure within a trusted session. IBM X-Force ID: 152671. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10739253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152671 - http://www.securityfocus.com/bid/107431
CVE ID: CVE-2018-1910 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T17:32:39.258Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152734. Additional Analyst Notes: - CVE Program Container: References: - https://e
in a trusted session. IBM X-Force ID: 152734. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152734 - http://www.securityfocus.com/bid/107423 - http://www.ibm.com/support/docview.wss?uid=ibm10875372
CVE ID: CVE-2018-1911 State: PUBLISHED Published: 2019-03-06T20:00:00Z Last Updated: 2024-09-17T03:48:59.203Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152735. Additional Analyst Notes: - CVE Program Container: References: - ht
re within a trusted session. IBM X-Force ID: 152735. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152735 - http://www.ibm.com/support/docview.wss?uid=ibm10873256
CVE ID: CVE-2018-1912 State: PUBLISHED Published: 2019-03-06T20:00:00Z Last Updated: 2024-09-16T18:33:53.815Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152736. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/sup
session. IBM X-Force ID: 152736. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10873254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152736
CVE ID: CVE-2018-1913 State: PUBLISHED Published: 2019-04-03T13:50:29.570674Z Last Updated: 2024-09-16T18:03:07.191Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/A:N/PR:L/UI:R/I:L/C:L/AV:N/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152737. Additional Analyst Notes: - CVE Program Container: Reference
isclosure within a trusted session. IBM X-Force ID: 152737. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10793649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152737 - http://www.securityfocus.com/bid/107771
CVE ID: CVE-2018-1914 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T16:52:36.620Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152738. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 152738. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152738 - http://www.ibm.com/support/docview.wss?uid=ibm10875372
CVE ID: CVE-2018-1916 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-17T04:04:48.590Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152740. Additional Analyst Notes: - CVE Program Contain
credentials disclosure within a trusted session. IBM X-Force ID: 152740. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152740 - http://www.ibm.com/support/docview.wss?uid=ibm10875340 - http://www.securityfocus.com/bid/107435
CVE ID: CVE-2018-1917 State: PUBLISHED Published: 2019-04-02T13:20:33.925351Z Last Updated: 2024-09-16T20:47:52.594Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:A/PR:L/AC:L/S:U/C:L/UI:N/I:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10872274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152784 - http://www.securityfocus.com/bid/107688
CVE ID: CVE-2018-1918 State: PUBLISHED Published: 2019-01-08T17:00:00Z Last Updated: 2024-09-17T03:37:31.854Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152785. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
session. IBM X-Force ID: 152785. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106483 - http://www.ibm.com/support/docview.wss?uid=ibm10793759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152785
CVE ID: CVE-2018-1920 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-16T20:22:54.229Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Marketing Platform Problem Types: Obtain Information Description: IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152855. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106201 - https://exchange.xforce.ibmcloud.com/vul
CVE Program Container: References: - http://www.securityfocus.com/bid/106201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152855 - http://www.ibm.com/support/docview.wss?uid=ibm10744217
CVE ID: CVE-2018-1921 State: PUBLISHED Published: 2019-07-17T14:05:20.754889Z Last Updated: 2024-09-16T19:40:47.101Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/S:C/AV:N/PR:L/C:L/A:N/I:L/E:H/RC:C/RL:O) Vendors: IBM Products: Campaign Problem Types: Cross-Site Scripting Description: IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152857. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm1088
57. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10887995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152857
CVE ID: CVE-2018-1922 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-17T02:51:42.208Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/152858 - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - htt
ps://exchange.xforce.ibmcloud.com/vulnerabilities/152858 - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398
CVE ID: CVE-2018-1923 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-17T01:46:23.158Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398 - https://exchange.xforce
ps://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152859
CVE ID: CVE-2018-1925 State: PUBLISHED Published: 2019-04-15T14:55:26.446570Z Last Updated: 2024-09-16T18:39:54.967Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/A:N/PR:N/AV:N/AC:H/UI:N/I:N/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM WebShere MQ 9.1.0.0, 9.1.0.1, 9.1.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 152925. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10744713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152925
CVE ID: CVE-2018-1926 State: PUBLISHED Published: 2018-12-12T16:00:00Z Last Updated: 2024-09-16T16:33:55.974Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious URL, a remote attacker could send a specially-crafted request. An attacker could exploit this vulnerability to perform CSRF attack and update available applications. IBM X-Force ID: 152992. Additional
exploit this vulnerability to perform CSRF attack and update available applications. IBM X-Force ID: 152992. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10742301 - http://www.securityfocus.com/bid/106204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/152992
CVE ID: CVE-2018-1927 State: PUBLISHED Published: 2018-11-30T15:00:00Z Last Updated: 2024-09-16T18:59:42.002Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: StoredIQ Problem Types: Gain Access Description: IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10741605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153118
CVE ID: CVE-2018-1928 State: PUBLISHED Published: 2018-11-30T15:00:00Z Last Updated: 2024-09-16T22:40:33.674Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/A:N/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: StoredIQ Problem Types: Gain Privileges Description: IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153119 - http
Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153119 - http://www.ibm.com/support/docview.wss?uid=ibm10741611
CVE ID: CVE-2018-1929 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T16:18:46.906Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URL link of a the view, and access information that should not be able to see. IBM X-Force ID: 153120. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107423 - http://www.ibm.com/support/docview.wss?uid=ibm1
ogram Container: References: - http://www.securityfocus.com/bid/107423 - http://www.ibm.com/support/docview.wss?uid=ibm10875372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153120
CVE ID: CVE-2018-1932 State: PUBLISHED Published: 2019-01-08T17:00:00Z Last Updated: 2024-09-16T23:06:54.738Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106486 - http://www.ibm.com/support/docview.wss?uid=ibm10793601 - https://exchange.xforce.i
://www.securityfocus.com/bid/106486 - http://www.ibm.com/support/docview.wss?uid=ibm10793601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153175