Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1602 State: PUBLISHED Published: 2018-10-04T15:00:00Z Last Updated: 2024-09-16T22:15:57.006Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143792. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 143792. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143792
CVE ID: CVE-2018-1603 State: PUBLISHED Published: 2018-10-04T15:00:00Z Last Updated: 2024-09-16T22:56:47.202Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143793. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 143793. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143793
CVE ID: CVE-2018-1604 State: PUBLISHED Published: 2018-10-04T15:00:00Z Last Updated: 2024-09-16T20:53:19.372Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143794. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 143794. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143794
CVE ID: CVE-2018-1605 State: PUBLISHED Published: 2018-10-02T15:00:00Z Last Updated: 2024-09-16T16:27:41.275Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143795. Additional Analyst Notes: - CVE Program Container: References: - http://ww
in a trusted session. IBM X-Force ID: 143795. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10733078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143795
CVE ID: CVE-2018-1606 State: PUBLISHED Published: 2018-11-06T16:00:00Z Last Updated: 2024-09-17T00:46:10.633Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert, Rational Software Architect Design Manager, Rational DOORS Next Generation, Rational Collaborative Lifecycle Management, Rational Rhapsody Design Manager, Rational Quality Manager, Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6
gement 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796. Additional Analyst Notes:
ror message that could be used in further attacks against the system. IBM X-Force ID: 143796. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10738301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143796
CVE ID: CVE-2018-1607 State: PUBLISHED Published: 2018-09-25T16:00:00Z Last Updated: 2024-09-16T23:21:43.800Z Severity: HIGH (CVSS 7.1 CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143797. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppo
rces. IBM X-Force ID: 143797. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143797
CVE ID: CVE-2018-1608 State: PUBLISHED Published: 2019-05-01T15:15:20.830155Z Last Updated: 2024-09-16T16:48:12.121Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/A:N/C:H/UI:N/S:U/PR:N/I:N/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Obtain Information Description: IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 143798. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14379
: - https://www.ibm.com/support/docview.wss?uid=ibm10882778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/143798 - http://www.securityfocus.com/bid/108290
CVE ID: CVE-2018-1610 State: PUBLISHED Published: 2018-09-26T15:00:00Z Last Updated: 2024-09-16T19:35:27.718Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143931. Additional Analyst Notes: - CVE Program Container: References: - ht
re within a trusted session. IBM X-Force ID: 143931. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/143931 - http://www.ibm.com/support/docview.wss?uid=ibm10719841
CVE ID: CVE-2018-1612 State: PUBLISHED Published: 2018-07-17T16:00:00Z Last Updated: 2024-09-16T23:51:25.995Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg22017062 - https://www.exploit-db.com/exploits/45005/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/144164
CVE ID: CVE-2018-1614 State: PUBLISHED Published: 2018-06-26T20:00:00Z Last Updated: 2024-09-17T02:20:56.674Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/144270 - http://www.securitytracker.com/id/1041168 - https://www-01.ibm.com/supp
nge.xforce.ibmcloud.com/vulnerabilities/144270 - http://www.securitytracker.com/id/1041168 - https://www-01.ibm.com/support/docview.wss?uid=swg22016887https://www-01.ibm.com/support/docview.wss?uid=swg22016887
CVE ID: CVE-2018-1618 State: PUBLISHED Published: 2019-04-02T13:20:33.412895Z Last Updated: 2024-09-16T18:18:01.511Z Severity: HIGH (CVSS 7.7 CVSS:3.0/A:N/I:N/PR:L/AC:L/S:C/C:H/UI:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144343. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.w
-Force ID: 144343. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144343
CVE ID: CVE-2018-1621 State: PUBLISHED Published: 2018-07-06T14:00:00Z Last Updated: 2024-09-17T01:01:50.768Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/A:N/AC:L/AV:L/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016821 - http://www.securitytracker.com/id/1041226 - https://exchange.
- http://www.ibm.com/support/docview.wss?uid=swg22016821 - http://www.securitytracker.com/id/1041226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144346
CVE ID: CVE-2018-1622 State: PUBLISHED Published: 2019-04-02T13:20:33.561790Z Last Updated: 2024-09-17T02:52:58.921Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/A:N/AV:N/S:U/AC:L/PR:N/UI:R/C:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Gain Access Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144348. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange
Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144348
CVE ID: CVE-2018-1623 State: PUBLISHED Published: 2019-04-02T13:20:33.617968Z Last Updated: 2024-09-17T02:31:27.256Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/PR:N/S:U/AC:L/C:L/UI:N/I:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144408
CVE ID: CVE-2018-1625 State: PUBLISHED Published: 2019-04-02T13:20:33.662278Z Last Updated: 2024-09-17T00:50:48.106Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/I:N/UI:N/C:L/AC:L/S:U/PR:L/AV:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 144410. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144410
CVE ID: CVE-2018-1626 State: PUBLISHED Published: 2019-04-02T13:20:33.705267Z Last Updated: 2024-09-16T17:58:40.751Z Severity: LOW (CVSS 3.1 CVSS:3.0/A:N/I:N/AC:H/S:U/PR:L/UI:N/C:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 144411. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/doc
IBM X-Force ID: 144411. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144411
CVE ID: CVE-2018-1630 State: PUBLISHED Published: 2019-08-20T18:50:22.628679Z Last Updated: 2024-09-16T17:33:44.603Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/A:H/I:H/PR:H/C:H/AC:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode. IBM X-Force ID: 144430. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilit
References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144430 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1631 State: PUBLISHED Published: 2019-08-20T18:50:22.686395Z Last Updated: 2024-09-17T03:07:51.394Z Severity: HIGH (CVSS 8.2 CVSS:3.0/I:H/PR:H/C:H/AC:L/UI:N/S:C/AV:L/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vu
ontainer: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144431 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1632 State: PUBLISHED Published: 2019-08-20T18:50:22.739820Z Last Updated: 2024-09-16T18:02:49.807Z Severity: HIGH (CVSS 8.2 CVSS:3.0/UI:N/S:C/AC:L/C:H/PR:H/I:H/A:H/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabi
r: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144432 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1633 State: PUBLISHED Published: 2019-08-20T18:50:22.800933Z Last Updated: 2024-09-16T19:10:03.832Z Severity: HIGH (CVSS 8.2 CVSS:3.0/A:H/AV:L/PR:H/C:H/I:H/AC:L/S:C/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X-Force ID: 144434. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabil
: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144434 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1634 State: PUBLISHED Published: 2019-08-20T18:50:22.855344Z Last Updated: 2024-09-16T19:30:44.772Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/A:H/S:C/UI:N/AC:L/I:H/C:H/PR:H/RL:O/RC:C/E:U) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/
Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144437 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1635 State: PUBLISHED Published: 2019-08-20T18:50:22.913021Z Last Updated: 2024-09-16T23:26:50.037Z Severity: HIGH (CVSS 8.2 CVSS:3.0/C:H/PR:H/I:H/UI:N/S:C/AC:L/A:H/AV:L/RL:O/RC:C/E:U) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.co
am Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144439 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1636 State: PUBLISHED Published: 2019-08-20T18:50:22.967801Z Last Updated: 2024-09-16T17:48:43.517Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AC:L/UI:N/S:C/PR:H/C:H/I:H/A:H/AV:L/E:U/RC:C/RL:O) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.co
am Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144441 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2018-1638 State: PUBLISHED Published: 2018-07-31T13:00:00Z Last Updated: 2024-09-16T22:41:02.666Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Bypass Security Description: IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10718415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144483
CVE ID: CVE-2018-1639 State: PUBLISHED Published: 2018-11-16T16:00:00Z Last Updated: 2024-09-16T19:15:13.909Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10731727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144579
CVE ID: CVE-2018-1640 State: PUBLISHED Published: 2019-04-02T13:20:33.751230Z Last Updated: 2024-09-16T16:58:48.899Z Severity: HIGH (CVSS 8.8 CVSS:3.0/UI:N/C:H/S:U/AC:L/PR:L/AV:N/A:H/I:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Gain Access Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 144580. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/suppor
stem. IBM X-Force ID: 144580. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10879093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144580
CVE ID: CVE-2018-1643 State: PUBLISHED Published: 2018-11-15T16:00:00Z Last Updated: 2024-09-16T23:00:35.607Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:N/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Cross-Site Scripting Description: The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144588 Additional Analyst Notes: - CVE Program Container: R
entials disclosure within a trusted session. IBM X-Force ID: 144588 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10716857 - http://www.securitytracker.com/id/1042088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/144588 - http://www.securityfocus.com/bid/106032