deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-5312
Published: 2017-04-14
Description: Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/138891/Symantec-Messaging-Gateway-10.6.1-Directory-Traversal.html; http://seclists.org/fulldisclosure/2016/Sep/71; http://www.securityfocus.com/bid/93148
CVE: CVE-2016-6299
Published: 2017-04-14
Description: The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/09/13/2; http://www.securityfocus.com/bid/92948; https://bugzilla.redhat.com/show_bug.cgi?id=1375490
CVE: CVE-2016-6489
Published: 2017-04-14
Description: The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: http://rhn.redhat.com/errata/RHSA-2016-2582.html; http://www.openwall.com/lists/oss-security/2016/07/29/7; http://www.ubuntu.com/usn/USN-3193-1
CVE: CVE-2016-7032
Published: 2017-04-14
Description: sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-2872.html; http://www.securityfocus.com/bid/95776; https://bugzilla.redhat.com/show_bug.cgi?id=1372830
CVE: CVE-2016-7051
Published: 2017-04-14
Description: XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611, CWE-918
References: http://www.securityfocus.com/bid/97688; https://bugzilla.redhat.com/show_bug.cgi?id=1378673; https://github.com/FasterXML/jackson-dataformat-xml/issues/211
CVE: CVE-2016-7060
Published: 2017-04-14
Description: The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97678; https://access.redhat.com/errata/RHSA-2017:0256; https://bugzilla.redhat.com/show_bug.cgi?id=1379909
CVE: CVE-2016-8602
Published: 2017-04-14
Description: The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303; http://rhn.redhat.com/errata/RHSA-2017-0013.html; http://rhn.redhat.com/errata/RHSA-2017-0014.html
CVE: CVE-2017-3447
Published: 2017-04-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was associated with multiple vulnerabilities without being assigned by a CNA. Notes: none
CVE: CVE-2017-6554
Published: 2017-04-14
Description: pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html; http://www.securityfocus.com/bid/97686; https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
CVE: CVE-2017-7188
Published: 2017-04-14
Description: Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97681; https://bitbucket.org/zurmo/zurmo/issues/426/to-report-a-xss-security-vulnerability-in; https://github.com/faizzaidi/Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC
CVE: CVE-2017-7357
Published: 2017-04-14
Description: Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: http://www.securityfocus.com/archive/1/540410/100/0/threaded; http://www.securityfocus.com/bid/97621; https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-12-887732597.html
CVE: CVE-2017-7690
Published: 2017-04-14
Description: Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://m4.rkw.io/blog/cve20177690-local-root-privesc-in-proxifier-for-mac-219.html; https://www.exploit-db.com/exploits/43225/; https://m4.rkw.io/blog/cve20177690-local-root-privesc-in-proxifier-for-mac-219.html
CVE: CVE-2017-7696
Published: 2017-04-14
Description: SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width and height parameters to otp_logon_ui_resources/qr, aka SAP Security Note 2389042.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://erpscan.io/advisories/erpscan-17-001-sap-java-dos-bc-iam-sso-otp-package-use-qr-servlet/; https://erpscan.io/advisories/erpscan-17-001-sap-java-dos-bc-iam-sso-otp-package-use-qr-servlet/
CVE: CVE-2017-7717
Published: 2017-04-14
Description: SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/100168; http://www.securityfocus.com/bid/95364; https://erpscan.io/advisories/erpscan-17-003-sap-netweaver-7-4-getuseruddielements-sql-injection/
CVE: CVE-2017-7871
Published: 2017-04-14
Description: trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/trollepierre/tdm/commit/2e89019d6a491f0a5ac3db8732181f6eb1d219aa; https://github.com/trollepierre/tdm/issues/50; https://github.com/trollepierre/tdm/commit/2e89019d6a491f0a5ac3db8732181f6eb1d219aa
CVE: CVE-2017-7875
Published: 2017-04-14
Description: In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97689; https://feh.finalrewind.org/; https://github.com/derf/feh/commit/f7a547b7ef8fc8ebdeaa4c28515c9d72e592fb6d
CVE: CVE-2017-7877
Published: 2017-04-14
Description: CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/97709; https://github.com/flatCore/flatCore-CMS/issues/27; http://www.securityfocus.com/bid/97709
CVE: CVE-2017-7878
Published: 2017-04-14
Description: SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/flatCore/flatCore-CMS/issues/29; https://github.com/flatCore/flatCore-CMS/issues/29
CVE: CVE-2017-7879
Published: 2017-04-14
Description: SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/flatCore/flatCore-CMS/issues/28; https://github.com/flatCore/flatCore-CMS/issues/28
CVE: CVE-2017-7874
Published: 2017-04-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-7881
Published: 2017-04-15
Description: BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/_header.php and patched in core/inc/bigtree/admin.php on 2017-04-14.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/bigtreecms/BigTree-CMS/commit/7761481ac40d83ac29fef42bc6b3c07c86694b56; https://www.cdxy.me/?p=765; https://github.com/bigtreecms/BigTree-CMS/commit/7761481ac40d83ac29fef42bc6b3c07c86694b56
CVE: CVE-2017-7882
Published: 2017-04-15
Description: LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.libreoffice.org/about-us/security/advisories/cve-2017-7882/; http://www.securityfocus.com/bid/97684; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=860
CVE: CVE-2017-7615
Published: 2017-04-16
Description: MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt; http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html; http://www.openwall.com/lists/oss-security/2017/04/16/2
CVE: CVE-2017-7885
Published: 2017-04-17
Description: Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3855; https://bugs.ghostscript.com/show_bug.cgi?id=697703; https://security.gentoo.org/glsa/201708-10
CVE: CVE-2017-7889
Published: 2017-04-17
Description: The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a4866aa812518ed1a37d8ea0c881dc946409de94; http://www.debian.org/security/2017/dsa-3945; http://www.openwall.com/lists/oss-security/2017/04/16/4
CVE: CVE-2017-7891
Published: 2017-04-17
Description: sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97710; https://github.com/sbpp/sourcebans-pp/issues/253; http://www.securityfocus.com/bid/97710
CVE: CVE-2016-4865
Published: 2017-04-17
Description: Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN06726266/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000184.html; http://www.securityfocus.com/bid/93281
CVE: CVE-2016-4866
Published: 2017-04-17
Description: Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN06726266/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000185.html; http://www.securityfocus.com/bid/93281
CVE: CVE-2016-4867
Published: 2017-04-17
Description: Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN07148816/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000187.html; http://www.securityfocus.com/bid/93461
CVE: CVE-2016-4868
Published: 2017-04-17
Description: Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN08736331/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000190.html; http://www.securityfocus.com/bid/97713
CVE: CVE-2016-4869
Published: 2017-04-17
Description: Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN09736331/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000191.html; http://www.securityfocus.com/bid/97715
CVE: CVE-2016-4870
Published: 2017-04-17
Description: Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN06726266/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000186.html; http://www.securityfocus.com/bid/93281
CVE: CVE-2016-4871
Published: 2017-04-17
Description: Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://jvn.jp/en/jp/JVN10092452/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000192.html; http://www.securityfocus.com/bid/97716
CVE: CVE-2016-4872
Published: 2017-04-17
Description: Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN07148816/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000188.html; http://www.securityfocus.com/bid/93461
CVE: CVE-2016-4873
Published: 2017-04-17
Description: Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-275
References: http://jvn.jp/en/jp/JVN07148816/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000189.html; http://www.securityfocus.com/bid/93461
CVE: CVE-2016-4874
Published: 2017-04-17
Description: Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.
CVSS Score: 3.5 (LOW)
CWE: CWE-284
References: http://jvn.jp/en/jp/JVN11288252/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000193.html; http://www.securityfocus.com/bid/97719
CVE: CVE-2015-8256
Published: 2017-04-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/141674/AXIS-Network-Camera-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/97699; https://www.exploit-db.com/exploits/39683/
CVE: CVE-2016-6726
Published: 2017-04-17
Description: Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/94133; https://source.android.com/security/bulletin/2016-11-01; http://www.securityfocus.com/bid/94133
CVE: CVE-2016-6727
Published: 2017-04-17
Description: The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000038666; http://www.securityfocus.com/bid/94133; https://source.android.com/security/bulletin/2016-11-01
CVE: CVE-2016-7551
Published: 2017-04-17
Description: chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://downloads.asterisk.org/pub/security/AST-2016-007.html; http://www.debian.org/security/2016/dsa-3700; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838832
CVE: CVE-2017-5647
Published: 2017-04-17
Description: A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt; http://www.debian.org/security/2017/dsa-3842; http://www.debian.org/security/2017/dsa-3843
CVE: CVE-2017-5648
Published: 2017-04-17
Description: While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-668
References: http://www.debian.org/security/2017/dsa-3842; http://www.debian.org/security/2017/dsa-3843; http://www.openwall.com/lists/oss-security/2020/07/20/8
CVE: CVE-2017-5650
Published: 2017-04-17
Description: In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOW_UPDATE before allowing the application to write more data. These waiting streams each consumed a thread. A malicious client could therefore construct a series of HTTP/2 requests that would consume all available processing threads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/97531; http://www.securitytracker.com/id/1038217
CVE: CVE-2017-5651
Published: 2017-04-17
Description: In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in the same Processor being used for multiple requests which in turn could lead to unexpected errors and/or response mix-up.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/97544; http://www.securitytracker.com/id/1038219
CVE: CVE-2016-5396
Published: 2017-04-17
Description: Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/97945; http://www.securitytracker.com/id/1038275; https://issues.apache.org/jira/browse/TS-5019
CVE: CVE-2017-5659
Published: 2017-04-17
Description: Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97949; http://www.securitytracker.com/id/1038275; https://issues.apache.org/jira/browse/TS-4819
CVE: CVE-2016-0228
Published: 2017-04-17
Description: IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. IBM X-Force ID: 110236.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22001952; http://www.securityfocus.com/bid/97670; http://www.ibm.com/support/docview.wss?uid=swg22001952
CVE: CVE-2016-3036
Published: 2017-04-17
Description: IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg21999649; http://www.securityfocus.com/bid/97918; http://www.ibm.com/support/docview.wss?uid=swg21999649
CVE: CVE-2016-3037
Published: 2017-04-17
Description: IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21999649; http://www.securityfocus.com/bid/97917; http://www.ibm.com/support/docview.wss?uid=swg21999649
CVE: CVE-2016-3038
Published: 2017-04-17
Description: IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21999649; http://www.securityfocus.com/bid/97915; http://www.ibm.com/support/docview.wss?uid=swg21999649
CVE: CVE-2017-1160
Published: 2017-04-17
Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 122892.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22001574; http://www.securityfocus.com/bid/97666; http://www.ibm.com/support/docview.wss?uid=swg22001574
CVE: CVE-2017-1161
Published: 2017-04-17
Description: IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22000316; http://www.securityfocus.com/bid/97665; http://www.ibm.com/support/docview.wss?uid=swg22000316