Skip to content
OpenAdvisories
Medium WID-SEC-2025-1655 2 CVEs

IBM Informix Dynamic Server: Mehrere Schwachstellen

Published Jul 27, 2025 · Updated Jul 28, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Informix Platform: Windows

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Informix ausnutzen, um Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

IBM Informix ist ein Datenbankmanagementsystem (DBMS) von IBM.

Vulnerabilities 2

  • High 7.5
    CVE-2024-49342

    IBM Informix Dynamic Server information disclosure

    IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

    IBM Informix Dynamic Server
  • Medium 5.4
    CVE-2024-49343

    IBM Informix Dynamic Server HTML injection

    IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

    IBM Informix Dynamic Server

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2024-54827, EUVD-2024-54828

  2. #1

    Initiale Fassung

References