Vulnerabilites related to IBM Corporation - BigInsights
cve-2016-2992
Vulnerability from cvelistv5
Published
2017-02-01 22:00
Modified
2024-08-05 23:40
Severity ?
EPSS score ?
Summary
IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/95979 | vdb-entry, x_refsource_BID | |
| http://www.ibm.com/support/docview.wss?uid=swg21987499 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| IBM Corporation | BigInsights |
Version: 3.0 Version: 3.0.0.1 Version: 3.0.0.2 Version: 1.1.0 Version: 1.2.0 Version: 1.3.0 Version: 1.4.0 Version: 2.0.0 Version: 2.1.0 Version: 2.1.1 Version: 2.1.2 Version: 4.0.0 Version: 4.1.0 Version: 4.2.0 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T23:40:14.310Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "95979", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/95979", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "BigInsights", vendor: "IBM Corporation", versions: [ { status: "affected", version: "3.0", }, { status: "affected", version: "3.0.0.1", }, { status: "affected", version: "3.0.0.2", }, { status: "affected", version: "1.1.0", }, { status: "affected", version: "1.2.0", }, { status: "affected", version: "1.3.0", }, { status: "affected", version: "1.4.0", }, { status: "affected", version: "2.0.0", }, { status: "affected", version: "2.1.0", }, { status: "affected", version: "2.1.1", }, { status: "affected", version: "2.1.2", }, { status: "affected", version: "4.0.0", }, { status: "affected", version: "4.1.0", }, { status: "affected", version: "4.2.0", }, ], }, ], datePublic: "2017-01-23T00:00:00", descriptions: [ { lang: "en", value: "IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", }, ], problemTypes: [ { descriptions: [ { description: "Cross-Site Scripting", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-02-03T10:57:01", orgId: "9a959283-ebb5-44b6-b705-dcc2bbced522", shortName: "ibm", }, references: [ { name: "95979", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/95979", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@us.ibm.com", ID: "CVE-2016-2992", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "BigInsights", version: { version_data: [ { version_value: "3.0", }, { version_value: "3.0.0.1", }, { version_value: "3.0.0.2", }, { version_value: "1.1.0", }, { version_value: "1.2.0", }, { version_value: "1.3.0", }, { version_value: "1.4.0", }, { version_value: "2.0.0", }, { version_value: "2.1.0", }, { version_value: "2.1.1", }, { version_value: "2.1.2", }, { version_value: "4.0.0", }, { version_value: "4.1.0", }, { version_value: "4.2.0", }, ], }, }, ], }, vendor_name: "IBM Corporation", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Cross-Site Scripting", }, ], }, ], }, references: { reference_data: [ { name: "95979", refsource: "BID", url: "http://www.securityfocus.com/bid/95979", }, { name: "http://www.ibm.com/support/docview.wss?uid=swg21987499", refsource: "CONFIRM", url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "9a959283-ebb5-44b6-b705-dcc2bbced522", assignerShortName: "ibm", cveId: "CVE-2016-2992", datePublished: "2017-02-01T22:00:00", dateReserved: "2016-03-09T00:00:00", dateUpdated: "2024-08-05T23:40:14.310Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2016-2924
Vulnerability from cvelistv5
Published
2017-02-01 22:00
Modified
2024-08-05 23:40
Severity ?
EPSS score ?
Summary
IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/95973 | vdb-entry, x_refsource_BID | |
| http://www.ibm.com/support/docview.wss?uid=swg21987499 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| IBM Corporation | BigInsights |
Version: 3.0 Version: 3.0.0.1 Version: 3.0.0.2 Version: 1.1.0 Version: 1.2.0 Version: 1.3.0 Version: 1.4.0 Version: 2.0.0 Version: 2.1.0 Version: 2.1.1 Version: 2.1.2 Version: 4.0.0 Version: 4.1.0 Version: 4.2.0 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T23:40:13.725Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "95973", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/95973", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "BigInsights", vendor: "IBM Corporation", versions: [ { status: "affected", version: "3.0", }, { status: "affected", version: "3.0.0.1", }, { status: "affected", version: "3.0.0.2", }, { status: "affected", version: "1.1.0", }, { status: "affected", version: "1.2.0", }, { status: "affected", version: "1.3.0", }, { status: "affected", version: "1.4.0", }, { status: "affected", version: "2.0.0", }, { status: "affected", version: "2.1.0", }, { status: "affected", version: "2.1.1", }, { status: "affected", version: "2.1.2", }, { status: "affected", version: "4.0.0", }, { status: "affected", version: "4.1.0", }, { status: "affected", version: "4.2.0", }, ], }, ], datePublic: "2017-01-23T00:00:00", descriptions: [ { lang: "en", value: "IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.", }, ], problemTypes: [ { descriptions: [ { description: "Cross-Site Scripting", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-02-03T10:57:01", orgId: "9a959283-ebb5-44b6-b705-dcc2bbced522", shortName: "ibm", }, references: [ { name: "95973", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/95973", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@us.ibm.com", ID: "CVE-2016-2924", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "BigInsights", version: { version_data: [ { version_value: "3.0", }, { version_value: "3.0.0.1", }, { version_value: "3.0.0.2", }, { version_value: "1.1.0", }, { version_value: "1.2.0", }, { version_value: "1.3.0", }, { version_value: "1.4.0", }, { version_value: "2.0.0", }, { version_value: "2.1.0", }, { version_value: "2.1.1", }, { version_value: "2.1.2", }, { version_value: "4.0.0", }, { version_value: "4.1.0", }, { version_value: "4.2.0", }, ], }, }, ], }, vendor_name: "IBM Corporation", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Cross-Site Scripting", }, ], }, ], }, references: { reference_data: [ { name: "95973", refsource: "BID", url: "http://www.securityfocus.com/bid/95973", }, { name: "http://www.ibm.com/support/docview.wss?uid=swg21987499", refsource: "CONFIRM", url: "http://www.ibm.com/support/docview.wss?uid=swg21987499", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "9a959283-ebb5-44b6-b705-dcc2bbced522", assignerShortName: "ibm", cveId: "CVE-2016-2924", datePublished: "2017-02-01T22:00:00", dateReserved: "2016-03-09T00:00:00", dateUpdated: "2024-08-05T23:40:13.725Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }