rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1417 
Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: SDK, Java Technology Edition
Published: 2018-02-22T19:00:00.000Z
CVE-2018-1418 
IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM X-Force ID: 138824.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-26T14:00:00.000Z
CVE-2018-1419 
IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could result in a denial of service. IBM X-Force ID: 138949.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2018-06-15T14:00:00.000Z
CVE-2018-1420 
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2018-10-01T15:00:00.000Z
CVE-2018-1421 
IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DataPower Gateways
Published: 2018-04-04T18:00:00.000Z
CVE-2018-1422 
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2018-08-06T14:00:00.000Z
CVE-2018-1423 
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
Published: 2018-07-10T16:00:00.000Z
CVE-2018-1424 
IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139029.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Marketing Platform
Published: 2018-12-07T16:00:00.000Z
CVE-2018-1425 
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139003.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Big Data Intelligence
Published: 2018-02-27T17:00:00.000Z
CVE-2018-1426 
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2018-1427 
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2018-1428 
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139073.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2018-1429 
IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139077.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: MQ Appliance
Published: 2018-03-23T19:00:00.000Z
CVE-2018-1430 
IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139226.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: API Connect
Published: 2018-04-30T14:00:00.000Z
CVE-2018-1431 
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2018-06-13T14:00:00.000Z
CVE-2018-1432 
IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking attack to conduct phishing, frame sniffing, social engineering or Cross-Site Request Forgery attacks. IBM X-Force ID: 139360.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2018-06-05T15:00:00.000Z
CVE-2018-1433 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1434 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: FlashSystem V9000
vendor: IBM
product: Storwize V3700
vendor: IBM
product: Storwize V5000
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Spectrum Virtualize for Public Cloud
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: Storwize V3500
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1435 
IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Notes
Published: 2018-03-14T00:00:00.000Z
CVE-2018-1437 
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Notes
Published: 2018-03-14T00:00:00.000Z
CVE-2018-1438 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM X-Force ID: 139566.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1439 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139589.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1440 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139595.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2018-1441 
IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139597.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Monitoring
Published: 2018-03-14T00:00:00.000Z
CVE-2018-1442 
IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139598.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Monitoring
Published: 2018-03-08T16:00:00.000Z
CVE-2018-1443 
An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.) This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim users password. IBM X-Force ID: 139754.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Access Manager
vendor: IBM
product: Tivoli Federated Identity Manager
Published: 2018-03-08T16:00:00.000Z
CVE-2018-1444 
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2018-03-14T00:00:00.000Z
CVE-2018-1445 
IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139907.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2018-04-17T15:00:00.000Z
CVE-2018-1447 
The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect
vendor: IBM
product: Spectrum Protect Snapshot
vendor: IBM
product: Spectrum Protect for Virtual Environments
vendor: IBM
product: Spectrum Protect for Space Management
Published: 2018-04-04T18:00:00.000Z
CVE-2018-1448 
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2018-1449 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1450 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1451 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1452 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140047.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1453 
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Identity Manager
Published: 2018-06-08T13:00:00.000Z
CVE-2018-1454 
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2018-06-05T15:00:00.000Z
CVE-2018-1455 
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Application Dependency Discovery Manager
Published: 2018-08-15T15:00:00.000Z
CVE-2018-1456 
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-06T17:00:00.000Z
CVE-2018-1457 
An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-06-27T18:00:00.000Z
CVE-2018-1458 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. IBM X-Force ID: 140209.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-07-10T16:00:00.000Z
CVE-2018-1459 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-05-25T14:00:00.000Z
CVE-2018-1460 
IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: PureData System for Analytics
Published: 2018-06-15T14:00:00.000Z
CVE-2018-1461 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140362.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: Storwize V5000
vendor: IBM
product: Storwize V3500
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: Storwize V3700
vendor: IBM
product: FlashSystem V9000
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Spectrum Virtualize for Public Cloud
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1462 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to including deleting files or causing a denial of service. IBM X-Force ID: 140363.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Storwize V3700
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Storwize V5000
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: FlashSystem V9000
vendor: IBM
product: Storwize V3500
vendor: IBM
product: Spectrum Virtualize for Public Cloud
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1463 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Storwize V5000
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: Storwize V3700
vendor: IBM
product: Spectrum Virtualize for Public Cloud
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: Storwize V3500
vendor: IBM
product: FlashSystem V9000
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1464 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Storwize V5000
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: Storwize V3500
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: Storwize V3700
vendor: IBM
product: Spectrum Virtualize for Public Cloud
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: FlashSystem V9000
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1465 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Storwize V3500
vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: Spectrum Virtualize for Public Cloud
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: FlashSystem V9000
vendor: IBM
product: Storwize V5000
vendor: IBM
product: Storwize V3700
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1466 
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: SAN Volume Controller
vendor: IBM
product: Storwize V5000
vendor: IBM
product: Spectrum Virtualize Software
vendor: IBM
product: Storwize V7000 (2076)
vendor: IBM
product: Storwize V3700
vendor: IBM
product: Storwize V3500
vendor: IBM
product: FlashSystem V9000
vendor: IBM
product: Spectrum Virtualize for Public Cloud
Published: 2018-05-17T21:00:00.000Z
CVE-2018-1467 
The IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to unauthenticated users. IBM X-Force ID: 140398.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Storwize V7000 Unified (2073)
Published: 2018-05-25T14:00:00.000Z