Skip to content
OpenAdvisories
Medium WID-SEC-2024-0441 2 CVEs

IBM InfoSphere Information Server: Mehrere Schwachstellen

Published Feb 20, 2024 · Updated Feb 20, 2024 · de-DE

Vendor: IBM Product: InfoSphere Information Server Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder vertrauliche Informationen offenzulegen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 2

  • Medium 5.4
    CVE-2023-33843

    IBM InfoSphere Information Server cross-site scripting

    IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

    IBM InfoSphere Information Server
  • Low 2.4
    CVE-2023-50955

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

    IBM InfoSphere Information Server

Revision history

  1. #1

    Initiale Fassung

References