Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4216 State: PUBLISHED Published: 2019-11-22T15:21:22.930321Z Last Updated: 2024-09-17T04:24:39.055Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/A:N/C:L/AV:N/S:U/I:L/UI:R/PR:L/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: SmartCloud Analytics Problem Types: Gain Access Description: IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1109745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159187
CVE ID: CVE-2019-4217 State: PUBLISHED Published: 2019-06-06T20:45:19.188566Z Last Updated: 2024-09-17T03:33:35.053Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/S:C/AC:L/AV:N/PR:N/C:L/A:N/UI:R/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Security Information Queue Problem Types: Gain Access Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159226. Additional Analyst Notes: - CVE Program Contain
sibly launch further attacks against the victim. IBM X-Force ID: 159226. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159226
CVE ID: CVE-2019-4218 State: PUBLISHED Published: 2019-06-06T20:45:19.229640Z Last Updated: 2024-09-16T18:08:01.369Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/PR:N/AC:L/AV:L/S:U/UI:N/A:N/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 159227. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159227
CVE ID: CVE-2019-4219 State: PUBLISHED Published: 2019-06-06T20:45:19.267529Z Last Updated: 2024-09-16T19:09:53.420Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/A:N/UI:N/C:L/AC:L/AV:N/PR:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Security Information Queue Problem Types: Obtain Information Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 159228. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159228
CVE ID: CVE-2019-4220 State: PUBLISHED Published: 2019-06-06T00:35:18.939262Z Last Updated: 2024-09-16T22:30:00.523Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/A:N/C:H/UI:N/S:U/AC:L/I:N/PR:N/AV:L/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10881197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159229
CVE ID: CVE-2019-4222 State: PUBLISHED Published: 2019-04-25T14:36:43.789630Z Last Updated: 2024-09-16T16:38:20.202Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/A:N/AV:N/S:U/PR:L/AC:L/C:L/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10880595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159231 - http://www.securityfocus.
rt/docview.wss?uid=ibm10880595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159231 - http://www.securityfocus.com/bid/108110
CVE ID: CVE-2019-4224 State: PUBLISHED Published: 2019-06-26T14:35:17.856605Z Last Updated: 2024-09-17T00:05:56.767Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/S:U/PR:L/AV:N/C:L/UI:N/I:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: PureApplication System Problem Types: Data Manipulation Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://
lyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159240
CVE ID: CVE-2019-4225 State: PUBLISHED Published: 2019-06-26T14:35:17.957346Z Last Updated: 2024-09-16T18:38:59.972Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/UI:N/I:N/AC:L/A:N/S:U/PR:H/AV:L/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: PureApplication System Problem Types: Obtain Information Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 159242. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159242
CVE ID: CVE-2019-4226 State: PUBLISHED Published: 2019-12-03T14:55:23.441006Z Last Updated: 2024-09-17T00:10:53.349Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/S:C/I:L/AC:L/AV:N/C:L/UI:R/PR:L/RC:C/RL:O/E:H) Vendors: IBM Products: Cloud Pak System Problem Types: Cross-Site Scripting Description: IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 -
59243. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1118487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159243
CVE ID: CVE-2019-4227 State: PUBLISHED Published: 2019-10-04T14:05:20.248976Z Last Updated: 2024-09-16T17:43:43.944Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AC:H/UI:N/C:L/PR:N/AV:N/A:L/S:U/I:L/RL:O/E:U/RC:C) Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should. IBM X-Force ID: 159352. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/886899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159352
CVE ID: CVE-2019-4231 State: PUBLISHED Published: 2019-12-20T16:25:25.056264Z Last Updated: 2024-09-17T04:24:14.175Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/PR:N/I:L/C:N/S:U/UI:R/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1138588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159356 - https://secu
ps://www.ibm.com/support/pages/node/1138588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159356 - https://security.netapp.com/advisory/ntap-20200103-0003/
CVE ID: CVE-2019-4234 State: PUBLISHED Published: 2019-06-26T14:35:18.000279Z Last Updated: 2024-09-16T16:48:14.124Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:N/AV:N/S:U/PR:L/A:N/AC:L/I:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: PureApplication System Problem Types: Gain Access Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xfor
CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159416
CVE ID: CVE-2019-4235 State: PUBLISHED Published: 2019-06-26T14:35:18.043161Z Last Updated: 2024-09-17T00:56:55.049Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/I:N/UI:N/C:H/AV:N/S:U/PR:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: PureApplication System Problem Types: Obtain Information Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 159417. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159417
CVE ID: CVE-2019-4236 State: PUBLISHED Published: 2019-07-22T13:35:13.777986Z Last Updated: 2024-09-16T23:06:20.548Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/I:L/C:L/S:U/A:N/PR:N/AC:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to restore or retrieve the object with incorrect ACL entries. IBM X-Force ID: 159418. Additional Analyst Notes:
ttacker to restore or retrieve the object with incorrect ACL entries. IBM X-Force ID: 159418. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10884766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159418
CVE ID: CVE-2019-4237 State: PUBLISHED Published: 2019-07-01T15:05:37.810713Z Last Updated: 2024-09-17T01:06:03.666Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/AV:N/AC:L/PR:L/C:L/S:C/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10879825 - https://exchange.xforce.ibmcloud.com/vulnerabil
References: - https://www.ibm.com/support/docview.wss?uid=ibm10879825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159419
CVE ID: CVE-2019-4238 State: PUBLISHED Published: 2019-04-25T14:36:43.827359Z Last Updated: 2024-09-17T01:36:59.663Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/PR:L/S:C/AV:N/A:N/UI:R/I:L/C:L/E:H/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159464. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.c
sted session. IBM X-Force ID: 159464. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10881165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159464
CVE ID: CVE-2019-4239 State: PUBLISHED Published: 2019-06-14T14:45:18.008806Z Last Updated: 2024-09-16T17:18:34.429Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/PR:N/A:N/S:U/AV:L/I:N/AC:L/UI:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Advanced Cloud Pak (IBM Cloud Private), MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift) Problem Types: Obtain Information Description: IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886591 - https://exchange.xforce.ib
VE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159465
CVE ID: CVE-2019-4241 State: PUBLISHED Published: 2019-06-26T14:35:18.087114Z Last Updated: 2024-09-17T02:01:30.148Z Severity: HIGH (CVSS 8.4 CVSS:3.0/C:H/AV:L/S:U/PR:N/A:H/AC:L/I:H/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: PureApplication System Problem Types: Bypass Security Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative access. IBM X-Force ID: 159467. Additional Analyst Notes: - CVE Program Container: References: - https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159467
CVE ID: CVE-2019-4243 State: PUBLISHED Published: 2019-11-22T15:21:23.358259Z Last Updated: 2024-09-16T21:03:28.161Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/A:N/C:L/AV:L/S:U/I:L/UI:N/PR:N/AC:L/E:U/RC:C/RL:O) Vendors: IBM Products: SmartCloud Analytics Problem Types: Gain Access Description: IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml and could allow an attacker to perform disruptive administrator tasks. IBM X-Force ID: 159517. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1109721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159517
CVE ID: CVE-2019-4244 State: PUBLISHED Published: 2019-12-10T16:10:23.706092Z Last Updated: 2024-09-17T00:31:17.155Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/C:H/UI:N/PR:N/I:H/AV:N/A:N/S:U/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: SmartCloud Analytics Problem Types: Gain Access Description: IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/1127523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159518
CVE ID: CVE-2019-4246 State: PUBLISHED Published: 2019-10-01T14:30:23.913831Z Last Updated: 2024-09-17T02:06:53.514Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/S:U/A:N/UI:N/PR:N/AC:H/C:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: Daeja ViewONE Virtual Problem Types: Obtain Information Description: IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/884380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159521
CVE ID: CVE-2019-4249 State: PUBLISHED Published: 2019-06-27T13:45:29.879839Z Last Updated: 2024-09-16T19:57:28.560Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/PR:L/AV:N/S:C/I:L/C:L/A:N/AC:L/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159647. Additional Analyst Notes: - CVE Program Container: Refe
als disclosure within a trusted session. IBM X-Force ID: 159647. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159647
CVE ID: CVE-2019-4250 State: PUBLISHED Published: 2019-06-27T13:45:29.921691Z Last Updated: 2024-09-16T17:28:19.282Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/PR:L/UI:R/AC:L/A:N/S:C/I:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648. Additional Analyst Notes
potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159648
CVE ID: CVE-2019-4252 State: PUBLISHED Published: 2019-06-27T13:45:29.960679Z Last Updated: 2024-09-16T18:23:47.067Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:N/AC:L/S:U/I:N/C:H/PR:L/AV:N/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 159883. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/suppo
ystem. IBM X-Force ID: 159883. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10956525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159883
CVE ID: CVE-2019-4253 State: PUBLISHED Published: 2019-08-20T18:50:23.064944Z Last Updated: 2024-09-16T18:29:01.946Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/A:H/I:H/C:H/PR:L/S:U/UI:N/AC:L/E:U/RL:O/RC:C) Vendors: IBM Products: Informix Dynamic Server Enterprise Edition Problem Types: Gain Privileges Description: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159941 - https://securit
.com/support/docview.wss?uid=ibm10964987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159941 - https://security.netapp.com/advisory/ntap-20190903-0002/
CVE ID: CVE-2019-4256 State: PUBLISHED Published: 2019-05-29T15:10:24.357586Z Last Updated: 2024-09-17T03:22:51.438Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/S:U/C:H/A:N/I:N/AC:H/AV:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 159944. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159944 - http://www.securityfocus.com/bid/108530
CVE ID: CVE-2019-4257 State: PUBLISHED Published: 2019-06-06T20:45:19.306746Z Last Updated: 2024-09-17T03:34:10.731Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/C:L/UI:N/A:N/S:U/PR:L/AC:L/AV:N/RC:C/E:U/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882478 - https://exchange.xforce.ibmcloud.com/vulnera
er: References: - https://www.ibm.com/support/docview.wss?uid=ibm10882478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159945
CVE ID: CVE-2019-4258 State: PUBLISHED Published: 2019-05-01T15:15:20.930264Z Last Updated: 2024-09-16T22:25:25.961Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/I:L/PR:L/S:C/UI:R/C:L/A:N/AV:N/AC:L/RL:O/RC:C/E:H) Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159946. Additional Analyst Notes: - CVE Program Container: References: - http://www.ib
trusted session. IBM X-Force ID: 159946. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10880591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/159946 - http://www.securityfocus.com/bid/108188
CVE ID: CVE-2019-4259 State: PUBLISHED Published: 2019-05-13T15:55:19.101426Z Last Updated: 2024-09-16T19:41:57.115Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:N/C:L/S:U/A:N/AC:L/PR:N/UI:N/AV:L/RC:C/RL:O/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be included with service snaps. IBM X-Force ID: 160011. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10883568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160011
CVE ID: CVE-2019-4260 State: PUBLISHED Published: 2019-07-02T15:05:23.258676Z Last Updated: 2024-09-17T02:16:42.552Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/UI:N/AV:N/PR:N/A:N/S:U/I:N/C:L/E:U/RL:O/RC:C) Vendors: IBM Products: Daeja ViewONE Problem Types: Obtain Information Description: IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10884382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160012
CVE ID: CVE-2019-4261 State: PUBLISHED Published: 2019-08-05T13:40:15.514791Z Last Updated: 2024-09-17T03:43:43.454Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/UI:N/A:L/C:N/I:N/AC:L/AV:N/S:U/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack caused by specially crafted messages. IBM X-Force ID: 160013. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10886887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/160013