|
197191
|
4.3 |
MEDIUM
Network
|
ibm
|
data_risk_manager
|
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to downl…
|
CWE-22
Path Traversal
|
CVE-2020-4430
|
2024-11-21 14:32 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197192
|
9.8 |
CRITICAL
Network
|
ibm
|
data_risk_manager
|
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and exec…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-4429
|
2024-11-21 14:32 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197193
|
9.1 |
CRITICAL
Network
|
ibm
|
data_risk_manager
|
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.
|
CWE-78
OS Command
|
CVE-2020-4428
|
2024-11-21 14:32 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197194
|
9.8 |
CRITICAL
Network
|
ibm
|
data_risk_manager
|
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially craft…
|
NVD-CWE-noinfo
|
CVE-2020-4427
|
2024-11-21 14:32 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197195
|
4.3 |
MEDIUM
Network
|
ibm
|
business_process_manager
business_automation_workflow
|
IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insuf…
|
CWE-863
Incorrect Authorization
|
CVE-2020-4446
|
2024-11-21 14:32 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197196
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2020-4421
|
2024-11-21 14:32 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197197
|
5.4 |
MEDIUM
Network
|
ibm
|
infosphere_information_server_on_cloud
infosphere_qualitystage
|
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4384
|
2024-11-21 14:32 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197198
|
5.3 |
MEDIUM
Network
|
hcltech
|
hcl_nomad
|
"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the settin…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-4092
|
2024-11-21 14:32 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197199
|
5.4 |
MEDIUM
Network
|
ibm
|
spectrum_protect_plus
|
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequen…
|
CWE-22
Path Traversal
|
CVE-2020-4209
|
2024-11-21 14:32 |
2020-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197200
|
9.3 |
CRITICAL
Network
|
vmware
|
esxi
|
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluat…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3955
|
2024-11-21 14:32 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
