Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9675 State: PUBLISHED Published: 2016-12-22T21:00:00 Last Updated: 2024-08-06T02:59:03.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/29/7 - http://www.securityfocus.com/bid/94589 - http://rhn.redhat.com/errata/RHSA-2017-0559.html - http://rhn.redhat.com/errata/RHSA-2017-0838.html
CVE ID: CVE-2016-9676 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T02:59:03.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX219580 - http://www.securityfocus.com/bid/95620 - http://www.securitytracker.com/id/1037625
CVE ID: CVE-2016-9677 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T02:59:03.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX219580 - http://www.securityfocus.com/bid/95620 - http://www.securitytracker.com/id/1037625
CVE ID: CVE-2016-9678 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T02:59:03.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX219580 - http://www.securityfocus.com/bid/95620 - http://www.securitytracker.com/id/1037625
CVE ID: CVE-2016-9679 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T02:59:03.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX219580 - http://www.securityfocus.com/bid/95620 - http://www.securitytracker.com/id/1037625
CVE ID: CVE-2016-9680 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T02:59:03.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX219580 - http://www.securityfocus.com/bid/95620 - http://www.securitytracker.com/id/1037625
CVE ID: CVE-2016-9681 State: PUBLISHED Published: 2016-12-25T17:00:00 Last Updated: 2024-08-06T02:59:03.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s9y/Serendipity/commit/e2a665e13b7de82a71c9bbb77575d15131b722be - http://www.securityfocus.com/bid/95095 - https://smarterbitbybit.com/cve-2016-9681-serendipity-cms-xss-vulnerability-in-version-2-0-4/
CVE ID: CVE-2016-9682 State: PUBLISHED Published: 2017-02-22T05:00:00 Last Updated: 2024-08-06T02:59:03.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component responsible for emailing out information about the state of the system. The application doesn't properly escape the information passed in the 'tsrDeleteRestartedFile' or 'currentTSREmailTo' variables before making a call to system(), allowing for remote command injection. Exploitatio
e' or 'currentTSREmailTo' variables before making a call to system(), allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42342/ - http://documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues?ParentProduct=868 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0003 - http://www.securityfocus.com/bid/96375
CVE ID: CVE-2016-9683 State: PUBLISHED Published: 2017-02-22T05:00:00 Last Updated: 2024-08-06T02:59:03.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI (/cgi-bin/extensionsettings) component responsible for handling some of the server's internal configurations. The CGI application doesn't properly escape the information it's passed when processing a particular multi-part form request involving scripts. The filename of the 'scriptname' variable is read in unsaniti
ng a particular multi-part form request involving scripts. The filename of the 'scriptname' variable is read in unsanitized before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. This is SonicWall Issue ID 181195. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0004 - http://documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues?ParentProduct=868 - http://pastebin.com/eJbeXgBr - http://www.securityfocus.com/bid/96375
CVE ID: CVE-2016-9684 State: PUBLISHED Published: 2017-02-22T05:00:00 Last Updated: 2024-08-06T02:59:03.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the r
() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. Additional Analyst Notes: - CVE Program Container: References: - http://documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues?ParentProduct=868 - http://pastebin.com/g1e2qU6N - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0005 - http://www.securityfocus.com/bid/96375
CVE ID: CVE-2016-9685 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:03.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2e83b79b2d6c78bf1b4aa227938a214dcbddc83f - https://access.redhat.com/errata/RHSA-2017:2669 - https://github.com/torvalds/linux/commit/2e83b79b2d6c78bf1b4aa227938a214dcbddc83f - http://www.se
rrata/RHSA-2017:2669 - https://github.com/torvalds/linux/commit/2e83b79b2d6c78bf1b4aa227938a214dcbddc83f - http://www.securityfocus.com/bid/94593 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396941 - http://www.openwall.com/lists/oss-security/2016/11/30/1
CVE ID: CVE-2016-9686 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T02:59:03.352Z Vendors: Puppet Products: Puppet Enterprise Problem Types: Denial of Service Description: The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2016-9686
CVE ID: CVE-2016-9687 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9688 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9689 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9690 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9691 State: PUBLISHED Published: 2017-05-05T19:00:00 Last Updated: 2024-08-06T02:59:03.103Z Vendors: IBM Corporation Products: WebSphere Cast Iron Cloud integration Problem Types: Obtain Information Description: IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 119515. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98338 - http://www.ibm.com/support/docview.wss
: - CVE Program Container: References: - http://www.securityfocus.com/bid/98338 - http://www.ibm.com/support/docview.wss?uid=swg21998014
CVE ID: CVE-2016-9692 State: PUBLISHED Published: 2017-05-05T19:00:00 Last Updated: 2024-08-06T02:59:03.244Z Vendors: IBM Corporation Products: WebSphere Cast Iron Cloud integration Problem Types: Denial of Service Description: IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 119516. Addi
ttacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 119516. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98337 - http://www.ibm.com/support/docview.wss?uid=swg21998014
CVE ID: CVE-2016-9693 State: PUBLISHED Published: 2017-03-07T17:00:00 Last Updated: 2024-08-06T02:59:03.295Z Vendors: IBM Corporation Products: Business Process Manager Advanced Problem Types: Gain Access Description: IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can be bypassed so that the payload might be considered executable and cause damage on the victim's machine. IBM Reference #: 1998655. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9807
rence #: 1998655. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98074 - https://www.ibm.com/support/docview.wss?uid=swg21998655
CVE ID: CVE-2016-9694 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T02:59:03.357Z Vendors: IBM Corporation Products: Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999960. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96825 - http://www.ibm.com/support/docview.wss?uid=swg21999960
CVE ID: CVE-2016-9696 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T02:59:03.361Z Vendors: IBM Corporation Products: Rational Rhapsody Design Manager Problem Types: Gain Access Description: IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96830 - http://www.ibm.com/support/docview.wss?uid=swg21999960
CVE ID: CVE-2016-9697 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T02:59:03.186Z Vendors: IBM Corporation Products: Rational Rhapsody Design Manager Problem Types: Obtain Information Description: An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed between the server and the browser. IBM Reference #: 1999960. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96828 - http://www.ibm.com/support/docview.wss?uid=swg21999960
CVE ID: CVE-2016-9698 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T02:59:03.372Z Vendors: IBM Products: Rational Rhapsody Design Manager, Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1999960. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/119522 - http://www.secu
es: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/119522 - http://www.securityfocus.com/bid/96829 - http://www.ibm.com/support/docview.wss?uid=swg22002258 - http://www.ibm.com/support/docview.wss?uid=swg21999960
CVE ID: CVE-2016-9700 State: PUBLISHED Published: 2017-07-05T18:00:00Z Last Updated: 2024-09-16T23:22:03.909Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119528
CVE ID: CVE-2016-9701 State: PUBLISHED Published: 2017-07-05T17:00:00Z Last Updated: 2024-09-16T20:03:46.546Z Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119529. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/119529 - http://www.securityfocus.com/bid/99352 - http://www.ibm.com/support/docview.ws
rce.ibmcloud.com/vulnerabilities/119529 - http://www.securityfocus.com/bid/99352 - http://www.ibm.com/support/docview.wss?uid=swg22004611 - http://www.securitytracker.com/id/1038912
CVE ID: CVE-2016-9703 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:59:03.334Z Vendors: IBM Corporation Products: Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95327 - http://www.securitytracker.com/id/1037765 - http://www.ibm.com/support/docview.wss?uid=swg21996761
CVE ID: CVE-2016-9704 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:59:03.286Z Vendors: IBM Corporation Products: Identity Manager Problem Types: Cross-Site Scripting Description: IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037765 - http://www.ibm.com/support/docview.wss?uid=swg21996761 - http://www.securityfocus.com/bid/95323
CVE ID: CVE-2016-9706 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:59:03.302Z Vendors: IBM Corporation Products: Integration Bus Problem Types: Obtain Information Description: IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997918. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96274 - http://www.ibm.com/support/docview.w
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/96274 - http://www.ibm.com/support/docview.wss?uid=swg21997918
CVE ID: CVE-2016-9707 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T02:59:03.414Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22000784 - http://www.securityfocus.com/bid/97171
CVE ID: CVE-2016-9710 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T02:59:03.143Z Vendors: IBM Products: Cognos Business Intelligence Problem Types: Obtain Information Description: IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004036 - http://www.securityfocus.com/bid/98975 - https://exchange.xforce.ibmcloud.com/v
om/support/docview.wss?uid=swg22004036 - http://www.securityfocus.com/bid/98975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119618
CVE ID: CVE-2016-9711 State: PUBLISHED Published: 2018-03-22T12:00:00Z Last Updated: 2024-09-17T00:16:43.520Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Cognos Analytics Problem Types: Obtain Information Description: IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 119619. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103495 - http://www.ibm.com/support/docview.wss?uid=swg22014337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11
03495 - http://www.ibm.com/support/docview.wss?uid=swg22014337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119619
CVE ID: CVE-2016-9714 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-16T19:46:40.495Z Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Gain Access Description: IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/119727 - http://www.ibm.com/support/docview.wss?uid=swg22006608
CVE ID: CVE-2016-9715 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-16T20:36:47.072Z Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Cross-Site Scripting Description: IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119728. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006611 - http://www.securityfocus.co
VE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006611 - http://www.securityfocus.com/bid/100025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119728
CVE ID: CVE-2016-9716 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-17T02:52:02.444Z Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Gain Access Description: IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119729. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119729 - http://www.securityfocus.com/bid/10002
s?uid=swg22006610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/119729 - http://www.securityfocus.com/bid/100026
CVE ID: CVE-2016-9717 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-16T23:56:16.113Z Vendors: IBM Products: InfoSphere Master Data Management Problem Types: Gain Access Description: HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100074 - http://www.ibm.com/support/docview.wss?uid=swg22006605 - https://exchange.xforce.ibm