admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-07 11:06:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2022-05-20 17:01:43 +00:00
parent b8a30d97c5
commit 16dcd3743e
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
2 changed files with 196 additions and 196 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

114
2021/39xxx/CVE-2021-39043.json
View File

@ -1,100 +1,100 @@
{ {
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"title" : "IBM Security Bulletin 6587797 (Jazz Team Server)", "title": "IBM Security Bulletin 6587797 (Jazz Team Server)",
"url" : "https://www.ibm.com/support/pages/node/6587797", "url": "https://www.ibm.com/support/pages/node/6587797",
"name" : "https://www.ibm.com/support/pages/node/6587797", "name": "https://www.ibm.com/support/pages/node/6587797",
"refsource" : "CONFIRM" "refsource": "CONFIRM"
}, },
{ {
"title" : "X-Force Vulnerability Report", "title": "X-Force Vulnerability Report",
"name" : "ibm-jazz-cve202139043-xss (214032)", "name": "ibm-jazz-cve202139043-xss (214032)",
"refsource" : "XF", "refsource": "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/214032" "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/214032"
} }
] ]
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"BM" : { "BM": {
"I" : "L", "I": "L",
"SCORE" : "6.400", "SCORE": "6.400",
"A" : "N", "A": "N",
"C" : "L", "C": "L",
"AC" : "L", "AC": "L",
"AV" : "N", "AV": "N",
"S" : "C", "S": "C",
"UI" : "N", "UI": "N",
"PR" : "L" "PR": "L"
}, },
"TM" : { "TM": {
"E" : "H", "E": "H",
"RL" : "O", "RL": "O",
"RC" : "C" "RC": "C"
} }
} }
}, },
"CVE_data_meta" : { "CVE_data_meta": {
"DATE_PUBLIC" : "2022-05-19T00:00:00", "DATE_PUBLIC": "2022-05-19T00:00:00",
"ID" : "CVE-2021-39043", "ID": "CVE-2021-39043",
"STATE" : "PUBLIC", "STATE": "PUBLIC",
"ASSIGNER" : "psirt@us.ibm.com" "ASSIGNER": "psirt@us.ibm.com"
}, },
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"value" : "IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214032.", "value": "IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214032.",
"lang" : "eng" "lang": "eng"
} }
] ]
}, },
"data_type" : "CVE", "data_type": "CVE",
"data_version" : "4.0", "data_version": "4.0",
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"value" : "Cross-Site Scripting", "value": "Cross-Site Scripting",
"lang" : "eng" "lang": "eng"
} }
] ]
} }
] ]
}, },
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "6.0.6" "version_value": "6.0.6"
}, },
{ {
"version_value" : "6.0.6.1" "version_value": "6.0.6.1"
}, },
{ {
"version_value" : "7.0" "version_value": "7.0"
}, },
{ {
"version_value" : "7.0.1" "version_value": "7.0.1"
}, },
{ {
"version_value" : "7.0.2" "version_value": "7.0.2"
} }
] ]
}, },
"product_name" : "Jazz Team Server" "product_name": "Jazz Team Server"
} }
] ]
}, },
"vendor_name" : "IBM" "vendor_name": "IBM"
} }
] ]
} }

112
2022/22xxx/CVE-2022-22365.json
View File

@ -1,98 +1,98 @@
{ {
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "7.0" "version_value": "7.0"
}, },
{ {
"version_value" : "8.0" "version_value": "8.0"
}, },
{ {
"version_value" : "8.5" "version_value": "8.5"
}, },
{ {
"version_value" : "9.0" "version_value": "9.0"
} }
] ]
}, },
"product_name" : "WebSphere Application Server" "product_name": "WebSphere Application Server"
} }
] ]
}, },
"vendor_name" : "IBM" "vendor_name": "IBM"
} }
] ]
} }
}, },
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"value" : "Gain Privileges", "value": "Gain Privileges",
"lang" : "eng" "lang": "eng"
} }
] ]
} }
] ]
}, },
"data_version" : "4.0", "data_version": "4.0",
"data_type" : "CVE", "data_type": "CVE",
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"lang" : "eng", "lang": "eng",
"value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames. IBM X-Force ID: 220904." "value": "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames. IBM X-Force ID: 220904."
} }
] ]
}, },
"CVE_data_meta" : { "CVE_data_meta": {
"STATE" : "PUBLIC", "STATE": "PUBLIC",
"ID" : "CVE-2022-22365", "ID": "CVE-2022-22365",
"DATE_PUBLIC" : "2022-05-19T00:00:00", "DATE_PUBLIC": "2022-05-19T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com" "ASSIGNER": "psirt@us.ibm.com"
}, },
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"BM" : { "BM": {
"I" : "L", "I": "L",
"A" : "L", "A": "L",
"SCORE" : "5.600", "SCORE": "5.600",
"S" : "U", "S": "U",
"AV" : "N", "AV": "N",
"UI" : "N", "UI": "N",
"C" : "L", "C": "L",
"AC" : "H", "AC": "H",
"PR" : "N" "PR": "N"
}, },
"TM" : { "TM": {
"RL" : "O", "RL": "O",
"RC" : "C", "RC": "C",
"E" : "U" "E": "U"
} }
} }
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"title" : "IBM Security Bulletin 6587947 (WebSphere Application Server)", "title": "IBM Security Bulletin 6587947 (WebSphere Application Server)",
"url" : "https://www.ibm.com/support/pages/node/6587947", "url": "https://www.ibm.com/support/pages/node/6587947",
"refsource" : "CONFIRM", "refsource": "CONFIRM",
"name" : "https://www.ibm.com/support/pages/node/6587947" "name": "https://www.ibm.com/support/pages/node/6587947"
}, },
{ {
"name" : "ibm-websphere-cve202222365-spoofing (220904)", "name": "ibm-websphere-cve202222365-spoofing (220904)",
"refsource" : "XF", "refsource": "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/220904", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/220904",
"title" : "X-Force Vulnerability Report" "title": "X-Force Vulnerability Report"
} }
] ]
} }