rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-4547 
IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Engineering Workflow Management
vendor: IBM
product: Rational Engineering Lifecycle Manager
vendor: IBM
product: Rational Rhapsody Model Manager
vendor: IBM
product: Engineering Lifecycle Optimization
vendor: IBM
product: Engineering Test Management
vendor: IBM
product: Rational Rhapsody Design Manager
vendor: IBM
product: Rational Quality Manager
vendor: IBM
product: Rational Team Concert
vendor: IBM
product: Rational Collaborative Lifecycle Management
vendor: IBM
product: Rational DOORS Next Generation
Published: 2021-01-27T16:15:26.519Z
CVE-2020-4548 
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Content Navigator
Published: 2020-08-20T15:55:13.918Z
CVE-2020-4549 
IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183317.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:39.157Z
CVE-2020-4550 
IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183318.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:39.630Z
CVE-2020-4551 
IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183319.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:40.042Z
CVE-2020-4552 
IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183320.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:40.476Z
CVE-2020-4553 
IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183321.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:40.954Z
CVE-2020-4554 
IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183322.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 Analyst Notebook
Published: 2020-08-03T12:35:41.375Z
CVE-2020-4555 
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2020-12-21T17:50:28.202Z
CVE-2020-4556 IBM Financial Transaction Manager information disclosure
IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system.  IBM X-Force ID:  183329.
Problem types: description: 525 Information Exposure Through Browser Caching
Affected products: vendor: IBM
product: Financial Transaction Manager
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2023-03-15T18:56:17.737Z
CVE-2020-4557 
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183611.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager
vendor: IBM
product: Business Automation Workflow
Published: 2020-06-29T14:00:16.805Z
CVE-2020-4559 
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Protect
Published: 2020-08-28T14:35:20.136Z
CVE-2020-4560 
IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2020-08-03T12:35:41.849Z
CVE-2020-4561 
IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-05-31T15:10:44.659Z
CVE-2020-4562 
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Planning Analytics
Published: 2021-04-26T16:30:42.449Z
CVE-2020-4564 
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183933.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Sterling B2B Integrator
vendor: IBM
product: Sterling File Gateway
Published: 2020-10-20T14:15:32.747Z
CVE-2020-4565 
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure communications being used between the application and server. IBM X-Force ID: 183935.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Plus
Published: 2020-06-26T13:45:31.317Z
CVE-2020-4566 
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2020-11-16T16:40:33.967Z
CVE-2020-4567 
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 184156.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-07-29T14:05:30.013Z
CVE-2020-4568 
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184157.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-11-10T14:50:26.845Z
CVE-2020-4569 
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 184158.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-07-29T14:05:30.525Z
CVE-2020-4572 
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184179.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-07-29T14:05:31.005Z
CVE-2020-4573 
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-07-29T14:05:31.458Z
CVE-2020-4574 
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 184181.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Key Lifecycle Manager
Published: 2020-07-29T14:05:31.946Z
CVE-2020-4575 
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Virtual Enterprise
vendor: IBM
product: WebSphere Application Server ND
Published: 2020-08-27T12:40:34.014Z
CVE-2020-4576 
IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 184428.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-10-01T15:37:08.776Z
CVE-2020-4578 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184433.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-09-10T16:50:13.965Z
CVE-2020-4579 
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2020-09-21T14:55:23.805Z
CVE-2020-4580 
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. IBM X-Force ID: 184439.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2020-09-21T14:55:24.241Z
CVE-2020-4581 
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2020-09-21T14:55:24.672Z
CVE-2020-4584 
IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i2 iBase
Published: 2020-10-30T13:50:16.466Z
CVE-2020-4587 
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Sterling Connect:Direct for UNIX
vendor: IBM
product: Connect:Direct for UNIX
Published: 2020-08-24T15:30:31.574Z
CVE-2020-4588 
IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: i2 iBase
Published: 2020-10-30T13:50:16.900Z
CVE-2020-4589 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 184585.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2020-08-13T11:50:13.870Z
CVE-2020-4590 
IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2020-09-21T14:55:25.148Z
CVE-2020-4591 
IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Server
Published: 2020-08-28T14:35:20.547Z
CVE-2020-4592 
IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: MQ Appliance
Published: 2020-11-18T17:20:18.953Z
CVE-2020-4593 
IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2020-08-24T15:30:31.985Z
CVE-2020-4594 
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:27.967Z
CVE-2020-4595 
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:28.667Z
CVE-2020-4596 
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:29.354Z
CVE-2020-4597 
IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 184822.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:30.002Z
CVE-2020-4598 
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 184823.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2020-08-24T15:30:32.411Z
CVE-2020-4599 
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:30.675Z
CVE-2020-4600 
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:31.318Z
CVE-2020-4602 
IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184836.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:31.942Z
CVE-2020-4603 
IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2020-08-27T12:40:34.545Z
CVE-2020-4604 
IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Guardium Insights
Published: 2021-01-13T18:10:32.577Z
CVE-2020-4606 
IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Security Verify Privilege Manager
Published: 2021-01-08T14:45:24.950Z
CVE-2020-4607 
IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Security Verify Privilege Vault Remote
Published: 2020-09-29T13:50:13.312Z
CVE-2020-4609 
IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Verify Privilege Manager
Published: 2021-06-25T17:40:23.806Z
CVE-2020-4610 
IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: Security Verify Privilege Manager
Published: 2021-06-25T17:40:25.545Z
CVE-2020-4611 
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:41.280Z
CVE-2020-4612 
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:41.717Z
CVE-2020-4613 
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:42.217Z
CVE-2020-4614 
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:42.657Z
CVE-2020-4615 
IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:43.091Z
CVE-2020-4616 
IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2020-09-22T13:55:43.537Z