rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1564 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131764.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1565 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131765.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1567 
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1568 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131778.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1569 
IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere Commerce Enterprise
Published: 2017-10-02T20:00:00.000Z
CVE-2017-1570 
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1571 
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 131853.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2018-03-22T12:00:00.000Z
CVE-2017-1575 
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2018-07-20T16:00:00.000Z
CVE-2017-1577 
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2017-09-27T17:00:00.000Z
CVE-2017-1583 
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Liberty for Java for Bluemix
Published: 2017-10-24T21:00:00.000Z
CVE-2017-1591 
IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132368.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: DataPower Gateways
Published: 2017-09-27T17:00:00.000Z
CVE-2017-1592 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132493.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1593 
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132494.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1595 
IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1596 
IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1597 
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2018-12-17T16:00:00.000Z
CVE-2017-1598 
IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1600 
IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1601 
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T13:00:00.000Z
CVE-2017-1602 
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-03-23T19:00:00.000Z
CVE-2017-1604 
IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132851.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Maximo Anywhere
Published: 2018-02-21T21:00:00.000Z
CVE-2017-1606 
IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1607 
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1608 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132928.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1609 
IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132929.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-11-02T15:00:00.000Z
CVE-2017-1612 
IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user. IBM X-Force ID: 132953.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: MQ
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1613 
IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive Engagement Center template data. IBM X-Force ID: 132954.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Connections
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1621 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133088.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1622 
IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2018-12-05T17:00:00.000Z
CVE-2017-1623 
IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133121.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-01-10T17:00:00.000Z
CVE-2017-1624 
IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security QRadar SIEM
Published: 2018-04-04T18:00:00.000Z
CVE-2017-1625 
IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 133123.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Pulse for QRadar
Published: 2018-03-08T16:00:00.000Z
CVE-2017-1628 
IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Business Process Manager
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1629 
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-03-23T19:00:00.000Z
CVE-2017-1631 
IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Components
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1632 
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1633 
IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2018-07-20T16:00:00.000Z
CVE-2017-1635 
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Tivoli Monitoring V6
Published: 2017-12-13T18:00:00.000Z
CVE-2017-1649 
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133259.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-10-02T15:00:00.000Z
CVE-2017-1650 
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133260.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1651 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133261.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1652 
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133263.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-07-03T19:00:00.000Z
CVE-2017-1653 
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133268.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-01-26T21:00:00.000Z
CVE-2017-1654 
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2018-03-02T17:00:00.000Z
CVE-2017-1655 
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-03-23T19:00:00.000Z
CVE-2017-1659 
"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."
Problem types: description: "Cross-Site Scripting (XSS)"
Affected products: vendor: n/a
product: "HCL iNotes"
Published: 2020-07-01T13:45:17.000Z
CVE-2017-1664 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1665 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1666 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 133540.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1668 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 133562.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1669 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1670 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1671 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1672 
IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z
CVE-2017-1673 
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2018-01-04T17:00:00.000Z