{"vulnerability": "cve-2023-3384", "sightings": [{"uuid": "e2c0310b-ab71-467e-8622-294869f45830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/235", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33849\n\ud83d\udd39 Description: IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques.  IBM X-Force ID:  257105.\n\ud83d\udccf Published: 2023-06-07T21:24:24.895Z\n\ud83d\udccf Modified: 2025-01-06T21:22:49.352Z\n\ud83d\udd17 References:\n1. https://exchange.xforce.ibmcloud.com/vulnerabilities/257105\n2. https://www.ibm.com/support/pages/node/7001687\n3. https://www.ibm.com/support/pages/node/7001697\n4. https://www.ibm.com/support/pages/node/7001695", "creation_timestamp": "2025-01-06T21:35:53.000000Z"}, {"uuid": "8afe1414-ef15-4d93-8da1-acdf68422728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33844", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33844\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\n\ud83d\udccf Published: 2025-04-09T14:03:58.894Z\n\ud83d\udccf Modified: 2025-04-09T14:27:49.987Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7230443", "creation_timestamp": "2025-04-09T14:48:35.000000Z"}, {"uuid": "1f9b0f1e-0193-4afe-a2d9-c55b9db8ab22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33843", "type": "seen", "source": "https://t.me/ctinow/189731", "content": "https://ift.tt/5wPWSku\nCVE-2023-33843", "creation_timestamp": "2024-02-21T16:31:18.000000Z"}, {"uuid": "80deef64-59b5-448e-afcd-e5478b4d23eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33844", "type": "seen", "source": "https://t.me/cvedetector/22564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-33844 - IBM Security Verify Governance Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-33844 \nPublished : April 9, 2025, 2:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T18:26:48.000000Z"}, {"uuid": "cf05c398-e103-4d4a-8f4b-657cf28b5207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33843", "type": "seen", "source": "https://t.me/arpsyndicate/4076", "content": "#ExploitObserverAlert\n\nCVE-2023-33843\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-33843. IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  256544.", "creation_timestamp": "2024-02-22T22:26:11.000000Z"}, {"uuid": "bc73d7c6-7591-439f-8e82-dd8b5b43bd8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33840", "type": "seen", "source": "https://t.me/cibsecurity/72799", "content": "\u203c CVE-2023-33840 \u203c\n\nIBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-24T00:37:56.000000Z"}, {"uuid": "769ab138-aa35-445f-8b6d-4b94b657e933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33843", "type": "seen", "source": "https://t.me/ctinow/189738", "content": "https://ift.tt/5wPWSku\nCVE-2023-33843", "creation_timestamp": "2024-02-21T16:31:27.000000Z"}, {"uuid": "a8ef7931-d620-4a82-8bcb-0122afa7183e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3384", "type": "seen", "source": "https://t.me/cibsecurity/67154", "content": "\u203c CVE-2023-3384 \u203c\n\nA flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation isnot performed when the label comes from an image. This flaw allows an attacker to publish a malicious image to a public registry containing a script that can be executed via Cross-site scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-24T20:26:09.000000Z"}, {"uuid": "83feb8b5-0222-4268-b953-75b1f02b0328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33846", "type": "seen", "source": "https://t.me/cibsecurity/65060", "content": "\u203c CVE-2023-33846 \u203c\n\nIBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-11T21:30:47.000000Z"}, {"uuid": "23f0ca8b-3082-4427-bb4d-7ab86c8dcdc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33842", "type": "seen", "source": "https://t.me/cibsecurity/65410", "content": "\u203c CVE-2023-33842 \u203c\n\nIBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T07:26:47.000000Z"}]}