Skip to content
OpenAdvisories

Product · IBM

InfoSphere Information Server

152 known vulnerabilities.

10 results · Clear filters · Feed

  • Low 3.5

    IBM DataStage Flow Designer application is affected by an information disclosure vulnerability

    IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.

  • Low 3.1

    IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

    IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

  • Low 3.7

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 DataStage Flow Designer  transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

  • Low 2.7

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

  • Low 3.1

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.

  • Low 2.4

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727.

  • Low 3.3

    IBM InfoSphere Information Server improper authentication

    IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorization to access. IBM X-Force ID: 258254.

  • Low 2.4

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

  • Low 3.1

    IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …

  • Low 3.5

    IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclo…