Skip to content
OpenAdvisories
High WID-SEC-2026-2801 5 CVEs

IBM InfoSphere Information Server: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Aug 12, 2026 · Revision 2 · de-DE

Vendor: IBM Product: InfoSphere Information Server Product: SPSS Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 5

  • Critical 9.8
    CVE-2022-45378

    Apache SOAP allows unauthenticated users to potentially invoke arbitrary code

    In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the classpath that meet certain criteria. Depending on what classes are available on the classpat…

    Apache Software Foundation Apache SOAP soap:soap Maven
  • High 7.5
    CVE-2022-40705

    Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP

    An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versi…

    Apache Software Foundation Apache SOAP soap:soap Maven
  • High 7.3
    CVE-2026-57915

    Apache Kerby: Kerberos Pre-Authentication Bypass

    It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

    Apache Software Foundation Apache Kerby druid org.apache.kerby:kerb-server Wolfi Maven
  • Medium 6.5
    CVE-2026-57914

    Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures

    By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

    Apache Software Foundation Apache Kerby druid tez Wolfi Maven
  • Medium 4.8
    CVE-2026-8484

    Heap buffer overflow in Jansi

    A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vu…

    FuseSource jansi jansi-native jansi Debian Ubuntu Azure Linux

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References