Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Data Risk Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-38915 1 Ibm 1 Data Risk Manager 2021-10-18 4.0 MEDIUM 6.5 MEDIUM
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
CVE-2020-4612 1 Ibm 1 Data Risk Manager 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.
CVE-2020-4616 1 Ibm 1 Data Risk Manager 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.
CVE-2020-4619 1 Ibm 1 Data Risk Manager 2020-09-22 4.0 MEDIUM 6.5 MEDIUM
IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976.
CVE-2020-4618 1 Ibm 1 Data Risk Manager 2020-09-22 4.0 MEDIUM 4.9 MEDIUM
IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937.
CVE-2020-4615 1 Ibm 1 Data Risk Manager 2020-09-22 3.5 LOW 5.4 MEDIUM
IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928.
CVE-2020-4430 1 Ibm 1 Data Risk Manager 2020-05-08 4.0 MEDIUM 4.3 MEDIUM
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.