Lucene search
+L

4355 matches found

OSV
OSV
added 2023/07/19 2:15 a.m.4 views

CVE-2023-27877

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/19 2:15 a.m.5 views

CVE-2023-26023

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

7.5CVSS5.8AI score0.00657EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/19 2:15 a.m.27 views

CVE-2023-26026

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

7.5CVSS6.1AI score0.0057EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/19 2:15 a.m.6 views

CVE-2023-26026

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

7.5CVSS5.8AI score0.0057EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/19 2:15 a.m.27 views

CVE-2023-27877

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905...

7.5CVSS6.2AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/19 2:15 a.m.21 views

Code injection

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

5CVSS7.2AI score0.0057EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/07/19 2:15 a.m.26 views

Code injection

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

5CVSS7.2AI score0.00657EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/07/19 2:15 a.m.21 views

Code injection

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905...

5CVSS7.4AI score0.00541EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/19 1:36 a.m.73 views

CVE-2023-26026

CVE-2023-26026 affects IBM Planning Analytics Cartridge for IBM Cloud Pak for Data 4.0. The vulnerability is an information disclosure via logs, caused by exposing sensitive data through log files. CNVD notes an related encryption issue tied to an insecure CouchDB password policy, enabling data c...

7.5CVSS5.9AI score0.0057EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/19 1:36 a.m.27 views

CVE-2023-26026 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

5.3CVSS7.2AI score0.0057EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/19 1:36 a.m.9 views

CVE-2023-26026 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

5.3CVSS6AI score0.0057EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/19 1:34 a.m.62 views

CVE-2023-26023

CVE-2023-26023 affects IBM Planning Analytics Cartridge for IBM Cloud Pak for Data v4.0. The vulnerability is an information disclosure via logs, exposing sensitive data that could enable further attacks. Public sources in the provided documents consistently describe log exposure as the issue, bu...

7.5CVSS6.3AI score0.00657EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/19 1:34 a.m.13 views

CVE-2023-26023 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

6.5CVSS6AI score0.00657EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/19 1:34 a.m.29 views

CVE-2023-26023 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

6.5CVSS7.2AI score0.00657EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/19 1:31 a.m.9 views

CVE-2023-27877 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905...

5.3CVSS6.2AI score0.00541EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/19 1:31 a.m.67 views

CVE-2023-27877

CVE-2023-27877 affects IBM Planning Analytics Cartridge for IBM Cloud Pak for Data 4.0. The issue arises from an insecure CouchDB password policy over the network, allowing an attacker to disclose sensitive data stored in CouchDB. Documents consistently identify the affected component as the Cart...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/19 1:31 a.m.34 views

CVE-2023-27877 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905...

5.3CVSS7.3AI score0.00541EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/19 1:15 a.m.7 views

CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368...

5.3CVSS5.8AI score0.00509EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/19 1:15 a.m.37 views

CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368...

5.3CVSS4.9AI score0.00509EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/19 1:15 a.m.22 views

Design/Logic Flaw

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368...

5CVSS5.2AI score0.00509EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder