deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12201
Published: 2019-03-14
Description: Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
CVE: CVE-2018-12202
Published: 2019-03-14
Description: Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
CVE: CVE-2018-12203
Published: 2019-03-14
Description: Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
CVE: CVE-2018-12204
Published: 2019-03-14
Description: Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-665
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us
CVE: CVE-2018-12205
Published: 2019-03-14
Description: Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
CVE: CVE-2018-12208
Published: 2019-03-14
Description: Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
CVE: CVE-2018-12209
Published: 2019-03-14
Description: Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-732
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12210
Published: 2019-03-14
Description: Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12211
Published: 2019-03-14
Description: Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12212
Published: 2019-03-14
Description: Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12213
Published: 2019-03-14
Description: Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12214
Published: 2019-03-14
Description: Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-119
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12215
Published: 2019-03-14
Description: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12216
Published: 2019-03-14
Description: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12217
Published: 2019-03-14
Description: Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to read device configuration information via local access.
CVSS Score: 2.3 (LOW)
CWE: CWE-732
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12218
Published: 2019-03-14
Description: Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a memory leak via local access.
CVSS Score: 3.3 (LOW)
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12219
Published: 2019-03-14
Description: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12220
Published: 2019-03-14
Description: Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
CVSS Score: 8.2 (HIGH)
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12221
Published: 2019-03-14
Description: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12222
Published: 2019-03-14
Description: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-20, CWE-125
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12223
Published: 2019-03-14
Description: Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-732
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-12224
Published: 2019-03-14
Description: Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-18089
Published: 2019-03-14
Description: Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-18090
Published: 2019-03-14
Description: Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2018-18091
Published: 2019-03-14
Description: Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://support.lenovo.com/us/en/product_security/LEN-25084; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html; https://support.lenovo.com/us/en/product_security/LEN-25084
CVE: CVE-2019-0121
Published: 2019-03-14
Description: Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://support.lenovo.com/us/en/solutions/LEN-26976; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00216.html; http://support.lenovo.com/us/en/solutions/LEN-26976
CVE: CVE-2019-0122
Published: 2019-03-14
Description: Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-415
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00217.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00217.html
CVE: CVE-2019-0129
Published: 2019-03-14
Description: Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00229.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00229.html
CVE: CVE-2019-0135
Published: 2019-03-14
Description: Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://support.lenovo.com/us/en/product_security/LEN-27843; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html; https://support.lenovo.com/us/en/product_security/LEN-27843
CVE: CVE-2018-11791
Published: 2019-03-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
CVE: CVE-2019-0206
Published: 2019-03-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2018-1658
Published: 2019-03-14
Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 144884.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=ibm10875340; http://www.securityfocus.com/bid/107435; https://exchange.xforce.ibmcloud.com/vulnerabilities/144884
CVE: CVE-2018-1688
Published: 2019-03-14
Description: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145509.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875340; http://www.securityfocus.com/bid/107435; https://exchange.xforce.ibmcloud.com/vulnerabilities/145509
CVE: CVE-2018-1759
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148613.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/148613
CVE: CVE-2018-1761
Published: 2019-03-14
Description: IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875364; http://www.securityfocus.com/bid/107419; https://exchange.xforce.ibmcloud.com/vulnerabilities/148615
CVE: CVE-2018-1763
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148617.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/148617
CVE: CVE-2018-1764
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148618.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/148618
CVE: CVE-2018-1823
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150426.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/150426
CVE: CVE-2018-1824
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150427.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/150427
CVE: CVE-2018-1825
Published: 2019-03-14
Description: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150428.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10875318; http://www.securityfocus.com/bid/107433; https://exchange.xforce.ibmcloud.com/vulnerabilities/150428