| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-5021 | 3.6 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a local user to impersonate another user on the system. IBM X-Force ID: 193657. | 2021-01-11 20:05:00 | 2021-01-08 19:15:00 |
| CVE-2020-5020 | 4.3 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's | 2021-01-11 20:04:00 | 2021-01-08 19:15:00 |
| CVE-2020-5019 | 6.4 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inj | 2021-01-11 20:03:00 | 2021-01-08 19:15:00 |
| CVE-2020-4667 | 4.0 | IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282. | 2021-01-11 19:57:00 | 2021-01-08 15:15:00 |
| CVE-2020-36168 | 7.2 | An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration f | 2021-01-11 19:53:00 | 2021-01-06 01:15:00 |
| CVE-2020-4733 | 3.5 | IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus | 2021-01-11 19:52:00 | 2021-01-08 21:15:00 |
| CVE-2020-4697 | 3.5 | IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus | 2021-01-11 19:52:00 | 2021-01-08 21:15:00 |
| CVE-2020-4691 | 3.5 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus | 2021-01-11 19:51:00 | 2021-01-08 21:15:00 |
| CVE-2020-4544 | 4.0 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 18318 | 2021-01-11 19:51:00 | 2021-01-08 21:15:00 |
| CVE-2020-4487 | 4.0 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 18186 | 2021-01-11 19:51:00 | 2021-01-08 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: