rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1411 
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2018-08-06T14:00:00.000Z
CVE-2017-1412 
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Governance and Intelligence
Published: 2018-08-06T14:00:00.000Z
CVE-2017-1418 
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: Integration Bus
vendor: IBM
product: WebSphere Message Broker
Published: 2018-11-26T17:00:00.000Z
CVE-2017-1421 
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: iNotes
Published: 2017-12-13T18:00:00.000Z
CVE-2017-1422 
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: MaaS360 DTM
Published: 2017-08-22T19:00:00.000Z
CVE-2017-1423 
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Portal
Published: 2017-12-20T18:00:00.000Z
CVE-2017-1424 
IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127477.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-25T16:00:00.000Z
CVE-2017-1425 
IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127478.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager Advanced
Published: 2017-09-26T17:00:00.000Z
CVE-2017-1427 
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2017-08-29T21:00:00.000Z
CVE-2017-1428 
IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2017-08-29T21:00:00.000Z
CVE-2017-1429 
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127587.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
Published: 2017-10-02T20:00:00.000Z
CVE-2017-1431 
IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127632.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Streams
Published: 2017-08-10T15:00:00.000Z
CVE-2017-1433 
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1434 
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1438 
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1439 
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128058.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1440 
IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Emptoris Services Procurement
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1441 
IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Emptoris Services Procurement
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1442 
IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 128107.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Emptoris Services Procurement
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1443 
IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128109.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Emptoris Services Procurement
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1444 
IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128110.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Emptoris Sourcing
Published: 2017-08-31T14:00:00.000Z
CVE-2017-1445 
IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128170.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Emptoris Spend Analysis
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1446 
IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128171.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Emptoris Spend Analysis
Published: 2017-08-30T21:00:00.000Z
CVE-2017-1447 
IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Emptoris Sourcing
Published: 2017-08-31T14:00:00.000Z
CVE-2017-1448 
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128173.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Emptoris Supplier Lifecycle Management
Published: 2017-08-09T18:00:00.000Z
CVE-2017-1449 
IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128174.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Emptoris Sourcing
Published: 2017-08-31T14:00:00.000Z
CVE-2017-1450 
IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128177.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Emptoris Sourcing
Published: 2017-08-31T14:00:00.000Z
CVE-2017-1451 
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1452 
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files. IBM X-Force ID: 128180.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2017-09-12T21:00:00.000Z
CVE-2017-1453 
IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 128372.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Access Manager
Published: 2017-11-13T23:00:00.000Z
CVE-2017-1457 
IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128376.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: QRadar Network Security
Published: 2017-09-05T21:00:00.000Z
CVE-2017-1458 
IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar Network Security
Published: 2017-09-05T21:00:00.000Z
CVE-2017-1459 
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-01-10T17:00:00.000Z
CVE-2017-1460 
IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: i
Published: 2017-07-31T21:00:00.000Z
CVE-2017-1461 
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128460.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational DOORS Next Generation
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1462 
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128461.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-02-21T21:00:00.000Z
CVE-2017-1465 
IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: TRIRIGA Application Platform
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1467 
A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2017-08-02T17:00:00.000Z
CVE-2017-1468 
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2017-08-02T17:00:00.000Z
CVE-2017-1469 
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2017-08-14T22:00:00.000Z
CVE-2017-1473 
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-04-23T13:00:00.000Z
CVE-2017-1474 
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-06-06T17:00:00.000Z
CVE-2017-1476 
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-06-06T17:00:00.000Z
CVE-2017-1477 
IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Access Manager
Published: 2017-11-13T23:00:00.000Z
CVE-2017-1478 
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-01-11T17:00:00.000Z
CVE-2017-1480 
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Access Manager
Published: 2018-06-06T17:00:00.000Z
CVE-2017-1481 
IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1482 
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128620.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1483 
IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Identity Manager
Published: 2017-09-27T17:00:00.000Z
CVE-2017-1484 
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Commerce Enterprise
Published: 2017-11-27T21:00:00.000Z
CVE-2017-1485 
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128623.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2017-08-29T21:00:00.000Z
CVE-2017-1486 
IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128624.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos Business Intelligence
Published: 2018-04-23T13:00:00.000Z
CVE-2017-1487 
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling File Gateway
Published: 2017-12-07T15:00:00.000Z
CVE-2017-1488 
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational DOORS Next Generation
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational Software Architect Design Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Rhapsody Design Manager
Published: 2018-07-06T14:00:00.000Z
CVE-2017-1489 
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Access Manager for Web
Published: 2017-08-28T20:00:00.000Z
CVE-2017-1490 
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2017-09-14T14:00:00.000Z
CVE-2017-1491 
IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar Network Security
Published: 2017-09-05T21:00:00.000Z