Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28751 State: PUBLISHED Published: 2024-07-09T07:11:10.331Z Last Updated: 2025-08-22T09:53:25.207Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: ifm Products: Smart PLC AC14xx Firmware, Smart PLC AC4xxS Firmware Problem Types: CWE-798 Description: An high privileged remote attacker can enable telnet access that accepts hardcoded credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-012
CVE ID: CVE-2024-28752 State: PUBLISHED Published: 2024-03-15T10:27:30.083Z Last Updated: 2025-02-13T17:47:30.605Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: CWE-918 Description: A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt - http://www.openwall.com/lists/oss-s
: References: - https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt - http://www.openwall.com/lists/oss-security/2024/03/14/3 - https://security.netapp.com/advisory/ntap-20240517-0001/
CVE ID: CVE-2024-28753 State: PUBLISHED Published: 2024-03-08T00:00:00 Last Updated: 2024-11-14T19:38:57.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dustri.org/b/carrot-disclosure.html
CVE ID: CVE-2024-28754 State: PUBLISHED Published: 2024-03-08T00:00:00 Last Updated: 2024-11-01T19:10:08.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dustri.org/b/carrot-disclosure.html
CVE ID: CVE-2024-28755 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-09-06T19:25:20.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the mbedtls_ssl_session_reset() API, the maximum TLS version to be negotiated was not restored to the configured one. An attacker was able to prevent an Mbed TLS server from establishing any TLS 1.3 connection, potentially resulting in a Denial of Service or forced version downgrade from TLS 1.3 to TLS 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mbed-tls.readthedocs.io/en/latest
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - https://hey3e.github.io - https://github.com/hey3e - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0
CVE ID: CVE-2024-28756 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-28T13:58:03.507Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:A/A:N/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to read and alter all network traffic between the application and the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-012.txt - https://www.solaredge.com/coordinated-vulnerability-
de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-012.txt - https://www.solaredge.com/coordinated-vulnerability-disclosure-policy/advisories/sedg-2024-1
CVE ID: CVE-2024-28757 State: PUBLISHED Published: 2024-03-10T00:00:00.000Z Last Updated: 2025-11-04T22:06:07.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/pull/842 - https://github.com/libexpat/libexpat/issues/839 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/ - https://lists.fedoraproject.org/archives/list/packa
0lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/ - https://security.netapp.com/advisory/ntap-20240322-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/ - http://www.openwall.com/lists/oss-security/2024/03/15/1
CVE ID: CVE-2024-28759 State: PUBLISHED Published: 2024-05-08T19:25:32.765Z Last Updated: 2025-03-28T19:22:40.614Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:A/A:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://windriver.com - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2024-28759
CVE ID: CVE-2024-28760 State: PUBLISHED Published: 2024-05-11T13:00:12.261Z Last Updated: 2024-08-02T00:56:58.372Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: App Connect Enterprise Problem Types: CWE-770 Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation. IBM X-Force ID: 285244. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285244
CVE ID: CVE-2024-28761 State: PUBLISHED Published: 2024-05-11T12:57:59.134Z Last Updated: 2025-03-13T17:33:41.765Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: App Connect Enterprise Problem Types: 80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245. Additional Analyst Notes: - CISA ADP Vulnrichment
thin the security context of the hosting site. IBM X-Force ID: 285245. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285245
CVE ID: CVE-2024-28762 State: PUBLISHED Published: 2024-06-12T17:54:33.200Z Last Updated: 2025-11-04T16:11:52.018Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-770 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 285246. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285246
CVE ID: CVE-2024-28764 State: PUBLISHED Published: 2024-05-01T16:35:38.108Z Last Updated: 2024-08-02T00:56:58.145Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: WebSphere Automation Problem Types: CWE-1236 Description: IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149857 - https://exchange.xforce.ibmcloud.co
VE Program Container: References: - https://www.ibm.com/support/pages/node/7149857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285623
CVE ID: CVE-2024-28766 State: PUBLISHED Published: 2025-01-27T01:14:42.274Z Last Updated: 2025-02-12T20:41:32.572Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-548 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7161444
CVE ID: CVE-2024-28767 State: PUBLISHED Published: 2024-12-20T13:48:15.514Z Last Updated: 2024-12-20T17:36:37.326Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Directory Integrator Problem Types: CWE-78 Description: IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179558
CVE ID: CVE-2024-28770 State: PUBLISHED Published: 2025-01-27T01:12:44.098Z Last Updated: 2025-02-12T20:01:13.641Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-614 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain t
ng this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7161444
CVE ID: CVE-2024-28771 State: PUBLISHED Published: 2025-01-27T01:12:15.877Z Last Updated: 2025-02-12T20:01:13.777Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-614 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain t
CVE ID: CVE-2024-28772 State: PUBLISHED Published: 2024-07-25T17:18:40.388Z Last Updated: 2024-08-02T00:56:58.371Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-79 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285645. Additional Analyst Notes: - CI
ially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285645. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285645
CVE ID: CVE-2024-28775 State: PUBLISHED Published: 2024-05-01T12:55:06.245Z Last Updated: 2024-08-02T00:56:58.164Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Automation Problem Types: CWE-79 Description: IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285648. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149856 - https:
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285648
CVE ID: CVE-2024-28776 State: PUBLISHED Published: 2025-02-19T16:02:08.425Z Last Updated: 2025-08-15T14:38:38.702Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Controller, Controller Problem Types: CWE-79 Description: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183597
CVE ID: CVE-2024-28777 State: PUBLISHED Published: 2025-02-19T16:04:19.920Z Last Updated: 2025-08-15T14:37:44.315Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Cognos Controller, Controller Problem Types: CWE-502 Description: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privileges, or cause denial of service attacks by exploiting the unrestricted deserialization of types in the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183597
CVE ID: CVE-2024-28778 State: PUBLISHED Published: 2025-01-07T15:57:13.969Z Last Updated: 2025-01-07T16:47:18.576Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Controller, Cognos Controller Problem Types: CWE-798 Description: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to publish code to private packages or repositories under the name of the organization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7179163
CVE ID: CVE-2024-28780 State: PUBLISHED Published: 2025-02-19T15:39:38.371Z Last Updated: 2025-07-25T15:51:09.515Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cognos Controller, Controller Problem Types: CWE-327 Description: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183597
CVE ID: CVE-2024-28781 State: PUBLISHED Published: 2024-05-10T15:49:35.965Z Last Updated: 2024-08-02T00:56:58.140Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: UrbanCode Deploy Problem Types: CWE-79 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285654. Additional Analyst Notes: - CISA ADP Vulnri
to credentials disclosure within a trusted session. IBM X-Force ID: 285654. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285654
CVE ID: CVE-2024-28782 State: PUBLISHED Published: 2024-04-03T12:00:55.863Z Last Updated: 2025-08-27T15:49:06.871Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-256 Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145683 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/7145683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285698
CVE ID: CVE-2024-28784 State: PUBLISHED Published: 2024-03-27T12:33:45.889Z Last Updated: 2024-08-02T00:56:58.190Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7145260 - https://exchange.x
ment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7145260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/285893
CVE ID: CVE-2024-28786 State: PUBLISHED Published: 2025-01-27T23:36:08.015Z Last Updated: 2025-01-28T15:18:25.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-319 Description: IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7173420
CVE ID: CVE-2024-28787 State: PUBLISHED Published: 2024-04-04T17:31:59.015Z Last Updated: 2024-08-02T00:56:58.143Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: IBM Products: Security Verify Access Container, Security Verify Access Appliance, Application Gateway Problem Types: CWE-650 Description: IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ww
X-Force ID: 286584. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/286584
CVE ID: CVE-2024-28793 State: PUBLISHED Published: 2024-05-28T12:00:47.899Z Last Updated: 2025-02-13T17:47:31.719Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Engineering Workflow Management Problem Types: CWE-79 Description: IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286830. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
a trusted session. IBM X-Force ID: 286830. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7154955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/286830 - http://www.openwall.com/lists/oss-security/2024/05/24/2
CVE ID: CVE-2024-28794 State: PUBLISHED Published: 2024-06-30T18:10:00.260Z Last Updated: 2024-08-02T00:56:58.335Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286831. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/286831
CVE ID: CVE-2024-28795 State: PUBLISHED Published: 2024-06-30T16:00:18.030Z Last Updated: 2024-08-02T00:56:58.063Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286832. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/286832
CVE ID: CVE-2024-28796 State: PUBLISHED Published: 2024-07-17T18:14:45.862Z Last Updated: 2024-08-02T00:56:58.414Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: ClearQuest Problem Types: CWE-79 Description: IBM ClearQuest (CQ) 9.1 through 9.1.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286833. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7160390 -
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7160390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/286833