|
198071
|
9.8 |
CRITICAL
Network
|
ibm
|
spectrum_protect_plus
|
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to e…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-4208
|
2024-11-21 14:32 |
2020-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198072
|
8.8 |
HIGH
Network
|
ibm
|
spectrum_protect_plus
|
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied i…
|
CWE-20 CWE-78
Improper Input Validation OS Command
|
CVE-2020-4206
|
2024-11-21 14:32 |
2020-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198073
|
7.5 |
HIGH
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP conne…
|
NVD-CWE-noinfo
|
CVE-2020-4276
|
2024-11-21 14:32 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198074
|
5.3 |
MEDIUM
Network
|
ibm
|
content_navigator
|
IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.
|
CWE-200
Information Exposure
|
CVE-2020-4309
|
2024-11-21 14:32 |
2020-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198075
|
8.8 |
HIGH
Network
|
ibm
|
content_navigator
|
IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-4253
|
2024-11-21 14:32 |
2020-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198076
|
6.3 |
MEDIUM
Network
|
ibm
|
datapower_gateway
|
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have be…
|
CWE-287
Improper Authentication
|
CVE-2020-4205
|
2024-11-21 14:32 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198077
|
4.9 |
MEDIUM
Network
|
ibm
|
datapower_gateway
|
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.
|
NVD-CWE-noinfo
|
CVE-2020-4203
|
2024-11-21 14:32 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198078
|
4.3 |
MEDIUM
Network
|
ibm
|
tivoli_netcool\/omnibus
|
IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trust…
|
CWE-352
Origin Validation Error
|
CVE-2020-4199
|
2024-11-21 14:32 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198079
|
3.8 |
LOW
Local
|
vmware
|
horizon_client workstation
|
VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attack…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-3951
|
2024-11-21 14:32 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198080
|
7.8 |
HIGH
Local
|
vmware
|
fusion horizon_client remote_console
|
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability d…
|
CWE-269
Improper Privilege Management
|
CVE-2020-3950
|
2024-11-21 14:32 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|