deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17220
Published: 2018-03-09
Description: SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en
CVE: CVE-2017-17221
Published: 2018-03-09
Description: Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en
CVE: CVE-2017-17222
Published: 2018-03-09
Description: Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en
CVE: CVE-2017-17223
Published: 2018-03-09
Description: Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en
CVE: CVE-2017-17225
Published: 2018-03-09
Description: The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en
CVE: CVE-2017-17226
Published: 2018-03-09
Description: The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulnerability due to insufficient input validation and improper configuration. An attacker may exploit this vulnerability to invoke TripAdvisor to load a specific URL and execute malicious code contained in the URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-tripadvisor-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-tripadvisor-en
CVE: CVE-2017-17227
Published: 2018-03-09
Description: GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds memory. Successful exploit may result in phone crash or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-smartphone-en
CVE: CVE-2017-17250
Published: 2018-03-09
Description: Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C00; AR510 V200R005C32; NetEngine16EX V200R005C32; SRG1300 V200R005C32; SRG2300 V200R005C32; SRG3300 V200R005C32 have an out-of-bounds write vulnerability. When a user executes a query command after the device received an abnormal OSPF message, the software writes data past the end of the intended buffer due to the insufficient verification of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending abnormal OSPF messages to the device. A successful exploit could cause the system to crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180214-01-ospf-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180214-01-ospf-en
CVE: CVE-2017-17279
Published: 2018-03-09
Description: The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343(C00) has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker bypass the authentication, the attacker can control the phone to sent short messages and make call within audio range to the phone.
CVSS Score: 5.5 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en; http://www.securityfocus.com/bid/103360; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en
CVE: CVE-2017-17280
Published: 2018-03-09
Description: NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some information leak.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-phone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-phone-en
CVE: CVE-2017-17281
Published: 2018-03-09
Description: SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en
CVE: CVE-2017-17303
Published: 2018-03-09
Description: Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en
CVE: CVE-2017-17304
Published: 2018-03-09
Description: The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en
CVE: CVE-2017-17321
Published: 2018-03-09
Description: Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability. Due to the improper validation of specific command line parameter, a local attacker could exploit this vulnerability to cause the software process abnormal.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ensp-en; http://www.securityfocus.com/bid/103425; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ensp-en
CVE: CVE-2017-17322
Published: 2018-03-09
Description: Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en; http://www.securityfocus.com/bid/103442; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en
CVE: CVE-2017-17323
Published: 2018-03-09
Description: Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en
CVE: CVE-2017-17324
Published: 2018-03-09
Description: Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en
CVE: CVE-2017-17325
Published: 2018-03-09
Description: Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. Due to improper verification of specific interface, an attacker who is on the same network with the user can obtain some information through a man-in-the-middle attack.
CVSS Score: 3.7 (LOW)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-hicinema-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-hicinema-en
CVE: CVE-2017-17326
Published: 2018-03-09
Description: Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation.
CVSS Score: 4.6 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en
CVE: CVE-2017-17327
Published: 2018-03-09
Description: Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable.
CVSS Score: 5.5 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en
CVE: CVE-2017-17328
Published: 2018-03-09
Description: Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en
CVE: CVE-2017-17329
Published: 2018-03-09
Description: Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML Schema data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
CVSS Score: 3.3 (LOW)
CWE: CWE-772
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-03-xml-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-03-xml-en
CVE: CVE-2017-17330
Published: 2018-03-09
Description: Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
CVSS Score: 3.3 (LOW)
CWE: CWE-772
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en
CVE: CVE-2016-0253
Published: 2018-03-09
Description: Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110562.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; https://exchange.xforce.ibmcloud.com/vulnerabilities/110562; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0268
Published: 2018-03-09
Description: XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0272
Published: 2018-03-09
Description: Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors. IBM X-Force ID: 111052.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; https://exchange.xforce.ibmcloud.com/vulnerabilities/111052; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0274
Published: 2018-03-09
Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to conduct clickjacking attacks via a crafted web site. IBM X-Force ID: 111076.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-254
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; https://exchange.xforce.ibmcloud.com/vulnerabilities/111076; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0275
Published: 2018-03-09
Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0276
Published: 2018-03-09
Description: IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. IBM X-Force ID: 111084.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977245; https://exchange.xforce.ibmcloud.com/vulnerabilities/111084; http://www-01.ibm.com/support/docview.wss?uid=swg21977245
CVE: CVE-2016-0286
Published: 2018-03-09
Description: IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21986852; https://exchange.xforce.ibmcloud.com/vulnerabilities/111234; http://www-01.ibm.com/support/docview.wss?uid=swg21986852
CVE: CVE-2018-7861
Published: 2018-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-7862
Published: 2018-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-7863
Published: 2018-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none