|
200281
|
8.8 |
HIGH
Network
|
ibm
|
financial_transaction_manager
|
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.
|
CWE-20
Improper Input Validation
|
CVE-2020-5002
|
2024-11-21 14:33 |
2023-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200282
|
7.5 |
HIGH
Network
|
ibm
|
financial_transaction_manager
|
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is …
|
-
|
CVE-2020-5026
|
2024-11-21 14:33 |
2023-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200283
|
7.5 |
HIGH
Network
|
ibm
|
financial_transaction_manager
|
IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot"…
|
CWE-22
Path Traversal
|
CVE-2020-5001
|
2024-11-21 14:33 |
2023-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200284
|
4.3 |
MEDIUM
Network
|
dell
|
emc_isilon_onefs
|
The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding. This provides the remotesupport user and users with restrict…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-5355
|
2024-11-21 14:33 |
2022-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200285
|
9.1 |
CRITICAL
Network
|
ibm
|
elastic_storage_system
spectrum_scale
|
A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. …
|
CWE-862
Missing Authorization
|
CVE-2020-4926
|
2024-11-21 14:33 |
2022-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200286
|
5.9 |
MEDIUM
Network
|
ibm
|
security_identity_manager
|
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-4970
|
2024-11-21 14:33 |
2022-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200287
|
7.5 |
HIGH
Network
|
ibm
|
datapower_gateway
|
IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 1…
|
NVD-CWE-noinfo
|
CVE-2020-4994
|
2024-11-21 14:33 |
2022-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200288
|
5.3 |
MEDIUM
Network
|
ibm
|
security_identity_governance_and_intelligence
|
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208.
|
CWE-200
Information Exposure
|
CVE-2020-4957
|
2024-11-21 14:33 |
2022-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200289
|
8.8 |
HIGH
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…
|
CWE-352
Origin Validation Error
|
CVE-2020-4668
|
2024-11-21 14:33 |
2022-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200290
|
4.3 |
MEDIUM
Network
|
ibm
|
rational_team_concert
|
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an authenticated user to obtain sensitive information about build definitions. IB…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-4989
|
2024-11-21 14:33 |
2022-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
