Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-28 | CVE-2024-25041 | Cross-site Scripting vulnerability in IBM Cognos Analytics IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). | 5.4 |
| 2024-06-28 | CVE-2024-25053 | Improper Certificate Validation vulnerability in IBM Cognos Analytics IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. | 5.9 |
| 2024-06-28 | CVE-2024-35156 | Information Exposure Through an Error Message vulnerability in IBM MQ IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 6.5 |
| 2024-06-28 | CVE-2024-35155 | Information Exposure Through an Error Message vulnerability in IBM MQ 9.3.0 IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 6.5 |
| 2024-06-28 | CVE-2024-38522 | Incorrect Comparison vulnerability in Hushline Hush Line Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. | 6.3 |
| 2024-06-28 | CVE-2024-35137 | Weak Password Requirements vulnerability in IBM Security Access Manager 10.0.0.0/10.0.7.1 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. | 6.2 |
| 2024-06-28 | CVE-2024-35139 | Incorrect Default Permissions vulnerability in IBM Security Access Manager 10.0.0.0/10.0.7.1 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. | 5.5 |
| 2024-06-28 | CVE-2024-38521 | Cross-site Scripting vulnerability in Hushline Hush Line Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. | 6.1 |
| 2024-06-28 | CVE-2024-37741 | Cross-site Scripting vulnerability in Openplcproject Openplc V3 Firmware OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture. | 5.4 |
| 2024-06-28 | CVE-2024-3800 | Cross-site Scripting vulnerability in Conceptintermedia S@M CMS Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears. | 6.1 |