cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2021-38862,https://securityvulnerability.io/vulnerability/CVE-2021-38862,Weak Cryptographic Algorithm in IBM Data Risk Manager,"IBM Data Risk Manager (iDNA) version 2.0.6 contains a vulnerability due to the use of cryptographic algorithms that are weaker than expected. This weakness may allow attackers to decrypt sensitive information, potentially leading to unauthorized access to confidential data. Organizations using this version should evaluate their risk exposure and consider immediate updates to strengthen data protection measures.",IBM,Data Risk Manager,5.9,MEDIUM,0.001069999998435378,false,,false,false,false,,,false,false,,2021-10-12T19:15:00.000Z,0
CVE-2021-38915,https://securityvulnerability.io/vulnerability/CVE-2021-38915,Credential Storage Vulnerability in IBM Data Risk Manager,"IBM Data Risk Manager version 2.0.6 has a security issue where user credentials are stored in plain text, making them accessible to any authenticated user. This vulnerability highlights significant risks in credential management, exposing sensitive information that could lead to unauthorized access and data breaches.",IBM,Data Risk Manager,5.3,MEDIUM,0.0005600000149570405,false,,false,false,false,,,false,false,,2021-10-12T19:15:00.000Z,0
CVE-2020-4621,https://securityvulnerability.io/vulnerability/CVE-2020-4621,,IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.,IBM,Data Risk Manager,8.8,HIGH,0.0009200000204145908,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4620,https://securityvulnerability.io/vulnerability/CVE-2020-4620,,"IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 184979.",IBM,Data Risk Manager,8.8,HIGH,0.016119999811053276,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4618,https://securityvulnerability.io/vulnerability/CVE-2020-4618,,IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937.,IBM,Data Risk Manager,5.5,MEDIUM,0.0007999999797903001,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4612,https://securityvulnerability.io/vulnerability/CVE-2020-4612,,IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.,IBM,Data Risk Manager,4.3,MEDIUM,0.0005600000149570405,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4616,https://securityvulnerability.io/vulnerability/CVE-2020-4616,,IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.,IBM,Data Risk Manager,5.3,MEDIUM,0.0005799999926239252,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4611,https://securityvulnerability.io/vulnerability/CVE-2020-4611,,IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922.,IBM,Data Risk Manager,8.8,HIGH,0.0013099999632686377,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4613,https://securityvulnerability.io/vulnerability/CVE-2020-4613,,IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.,IBM,Data Risk Manager,5.9,MEDIUM,0.0010100000072270632,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4614,https://securityvulnerability.io/vulnerability/CVE-2020-4614,,IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.,IBM,Data Risk Manager,3.7,LOW,0.0010100000072270632,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4615,https://securityvulnerability.io/vulnerability/CVE-2020-4615,,IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928.,IBM,Data Risk Manager,5.4,MEDIUM,0.0005000000237487257,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4617,https://securityvulnerability.io/vulnerability/CVE-2020-4617,,IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 184930.,IBM,Data Risk Manager,7.1,HIGH,0.0006799999973736703,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4619,https://securityvulnerability.io/vulnerability/CVE-2020-4619,,IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976.,IBM,Data Risk Manager,5.3,MEDIUM,0.0005600000149570405,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4622,https://securityvulnerability.io/vulnerability/CVE-2020-4622,,"IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983.",IBM,Data Risk Manager,5.9,MEDIUM,0.0007900000200606883,false,,false,false,false,,,false,false,,2020-09-22T14:15:00.000Z,0
CVE-2020-4430,https://securityvulnerability.io/vulnerability/CVE-2020-4430,,"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.",IBM,Data Risk Manager,4.3,MEDIUM,0.9568300247192383,true,2021-11-03T00:00:00.000Z,false,false,true,2021-11-03T00:00:00.000Z,,false,false,,2020-05-07T20:15:00.000Z,0
CVE-2020-4427,https://securityvulnerability.io/vulnerability/CVE-2020-4427,,"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.",IBM,Data Risk Manager,9,CRITICAL,0.029079999774694443,true,2021-11-03T00:00:00.000Z,false,false,true,2021-11-03T00:00:00.000Z,,false,false,,2020-05-07T20:15:00.000Z,0
CVE-2020-4429,https://securityvulnerability.io/vulnerability/CVE-2020-4429,,"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.",IBM,Data Risk Manager,10,CRITICAL,0.053619999438524246,false,,false,false,false,,,false,false,,2020-05-07T20:15:00.000Z,0
CVE-2020-4428,https://securityvulnerability.io/vulnerability/CVE-2020-4428,,"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.",IBM,Data Risk Manager,9.1,CRITICAL,0.005439999978989363,true,2021-11-03T00:00:00.000Z,false,false,true,2021-11-03T00:00:00.000Z,,false,false,,2020-05-07T20:15:00.000Z,0