rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1753 
Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Team Concert
Published: 2018-08-20T21:00:00.000Z
CVE-2017-1755 
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 could allow a local attacker to inject commands into malicious files that could be executed by the administrator. IBM X-Force ID: 135855.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2018-08-06T14:00:00.000Z
CVE-2017-1756 
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Process Manager
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1757 
IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Security Guardium
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1758 
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Control Center
vendor: IBM
product: Financial Transaction Manager
vendor: IBM
product: Transformation Extender Advanced
Published: 2018-02-21T21:00:00.000Z
CVE-2017-1760 
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. IBM X-Force ID: 126454.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1761 
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2018-02-09T17:00:00.000Z
CVE-2017-1762 
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Collaborative Lifecycle Management
Published: 2018-03-23T19:00:00.000Z
CVE-2017-1764 
IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Business Intelligence
Published: 2018-04-23T13:00:00.000Z
CVE-2017-1765 
IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Process Manager
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1766 
Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Business Process Manager
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1767 
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager
Published: 2018-03-30T16:00:00.000Z
CVE-2017-1768 
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Big Data Intelligence
Published: 2018-05-29T13:00:00.000Z
CVE-2017-1769 
IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Business Process Manager
Published: 2018-01-24T14:00:00.000Z
CVE-2017-1772 
IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: MobileFirst Platform Foundation
Published: 2018-04-04T18:00:00.000Z
CVE-2017-1773 
IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: DataPower Gateways
Published: 2018-01-31T15:00:00.000Z
CVE-2017-1774 
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Big Data Intelligence
Published: 2018-02-26T14:00:00.000Z
CVE-2017-1779 
IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2018-01-29T16:00:00.000Z
CVE-2017-1783 
IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2018-01-29T16:00:00.000Z
CVE-2017-1784 
IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user. IBM X-Force ID: 136858.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2018-01-29T16:00:00.000Z
CVE-2017-1785 
IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2018-02-07T17:00:00.000Z
CVE-2017-1786 
IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memory leak resulting in service loss. IBM X-Force ID: 136975.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2018-04-23T13:00:00.000Z
CVE-2017-1787 
IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Publishing Engine
Published: 2018-03-02T17:00:00.000Z
CVE-2017-1788 
IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 137031.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2018-03-22T12:00:00.000Z
CVE-2017-1789 
IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Tivoli Monitoring V6
Published: 2018-03-22T12:00:00.000Z
CVE-2017-1790 
IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137035.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
Published: 2018-04-12T15:00:00.000Z
CVE-2017-1791 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137036.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2017-1792 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137037.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2017-1793 
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137038.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Quality Manager
Published: 2018-07-10T16:00:00.000Z
CVE-2017-1794 
IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Tivoli Monitoring
Published: 2018-09-19T15:00:00.000Z
CVE-2017-1795 
IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere MQ
Published: 2018-07-06T14:00:00.000Z
CVE-2017-20001 
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T23:27:38.000Z
CVE-2017-20002 
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T06:00:09.000Z
CVE-2017-20004 
In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T06:10:13.000Z
CVE-2017-20005 
NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-06T21:04:06.000Z
CVE-2017-20006 
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:54:44.000Z
CVE-2017-20007 Information Exposure in INGEPAC DA AU
Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this vulnerability in order to obtain different configuration files.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Ingeteam
product: INGEPAC DA AU
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Industrial Cybersecurity team of S21sec, special mention to Jacinto Moral Matellán.
Published: 2021-10-25T13:33:40.894Z
CVE-2017-20008 myCRED < 1.7.8 - Reflected Cross-Site Scripting
The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
Credits: lang: en
value: Jeremie Amsellem
Published: 2021-11-29T08:25:28.000Z
CVE-2017-20011 WEKA INTEREST Security Scanner HTTP denial of service
A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:52.000Z
CVE-2017-20012 WEKA INTEREST Security Scanner Stresstest Scheme denial of service
A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:54.000Z
CVE-2017-20013 WEKA INTEREST Security Scanner Stresstest Configuration denial of service
A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:55.000Z
CVE-2017-20014 WEKA INTEREST Security Scanner Webspider denial of service
A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:57.000Z
CVE-2017-20015 WEKA INTEREST Security Scanner LAN Viewer denial of service
A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:58.000Z
CVE-2017-20016 WEKA INTEREST Security Scanner Portscan memory allocation
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-789
description: CWE-789 Uncontrolled Memory Allocation
Affected products: vendor: WEKA
product: INTEREST Security Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:46:00.000Z
CVE-2017-20017 The Next Generation of Genealogy Sitebuilding timeline2.php sql injection
A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: unspecified
product: The Next Generation of Genealogy Sitebuilding
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: X-Cisadane
Published: 2022-06-05T05:10:10.000Z
CVE-2017-20018 XAMPP Installer uncontrolled search path
A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely.
Problem types: cwe_id: CWE-427
description: CWE-427 Uncontrolled Search Path
Affected products: vendor: unspecified
product: XAMPP
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-06-09T22:35:49.000Z