InfoSphere Information Server

152 results · Feed

• Medium 4.6
  CVE-2023-25928

  IBM InfoSphere Information Server cross-site scripting

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

  IBM InfoSphere Information Server
  Feb 21, 2023
• High 7.5
  CVE-2023-24960

  IBM InfoSphere Information Server information disclosure

  IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246…

  IBM InfoSphere Information Server
  Feb 17, 2023
• Medium 6.2
  CVE-2023-24964

  IBM InfoSphere Information Server information disclosure

  IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463.

  IBM InfoSphere Information Server
  Feb 17, 2023
• Medium 4.6
  CVE-2023-23475

  IBM Infosphere Information Server cross-site scripting

  IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

  IBM InfoSphere Information Server
  Feb 8, 2023
• Medium 5.4
  CVE-2022-47983

  IBM InfoSphere Information Server cross-site scripting

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

  IBM InfoSphere Information Server
  Feb 1, 2023
• Medium 5.3
  CVE-2022-41733

  IBM InfoSphere Information Server denial of service

  IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted. IBM X-Force ID: 237583.

  IBM InfoSphere Information Server
  Jan 20, 2023
• Medium 5.4
  CVE-2022-40753

  IBM InfoSphere Information Server cross-site scripting

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

  IBM InfoSphere Information Server
  Nov 11, 2022
• Medium 6.3
  CVE-2022-41291

  IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user…

  IBM InfoSphere Information Server
  Oct 7, 2022
• Medium 4.3
  CVE-2022-36772

  IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should on…

  IBM InfoSphere Information Server
  Oct 7, 2022
• Medium 5.4
  CVE-2022-40748

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Sep 23, 2022
• Medium 5.3
  CVE-2022-35715

  IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te…

  IBM InfoSphere Information Server
  Aug 10, 2022
• Medium 4.6
  CVE-2022-22373

  An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead …

  IBM InfoSphere Information Server
  Jul 1, 2022
• Medium 5.3
  CVE-2022-31768

  IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted S…

  IBM InfoSphere Information Server
  Jun 6, 2022
• Medium 5.9
  CVE-2022-22454

  IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on th…

  IBM InfoSphere Information Server
  May 10, 2022
• Medium 5.4
  CVE-2022-22443

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Apr 28, 2022
• Medium 6.5
  CVE-2022-22441

  IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users…

  IBM InfoSphere Information Server
  Apr 28, 2022
• Medium 5.2
  CVE-2022-22427

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Apr 28, 2022
• Medium 5.4
  CVE-2022-22322

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Apr 28, 2022
• Medium 5.4
  CVE-2021-38952

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Apr 28, 2022
• Medium 4.3
  CVE-2021-38887

  IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from applicati…

  IBM InfoSphere Information Server
  Nov 10, 2021
• High 7.1
  CVE-2021-38948

  IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing X…

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 6.5
  CVE-2021-29888

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exe…

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 5.9
  CVE-2021-29875

  IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third …

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 5.4
  CVE-2021-29771

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 5.4
  CVE-2021-29738

  IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forger…

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 5.9
  CVE-2021-29737

  IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of…

  IBM InfoSphere Information Server
  Nov 2, 2021
• Medium 6.3
  CVE-2021-29730

  IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted S…

  IBM InfoSphere Information Server
  Jul 9, 2021
• Medium 6.1
  CVE-2021-29712

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Jul 9, 2021
• Low 3.1
  CVE-2021-29681

  IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …

  IBM InfoSphere Information Server
  May 21, 2021
• Medium 5.9
  CVE-2021-29747

  IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a vu…

  IBM InfoSphere Information Server
  May 17, 2021
• Medium 5.4
  CVE-2020-4997

  IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

  IBM InfoSphere Information Server
  Apr 5, 2021
• Medium 4.0
  CVE-2020-4886

  IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by …

  IBM InfoSphere Information Server
  Nov 13, 2020
• Medium 6.4
  CVE-2020-4741

  IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows…

  IBM InfoSphere Information Server
  Oct 12, 2020
• Medium 5.2
  CVE-2020-4740

  IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicio…

  IBM InfoSphere Information Server
  Oct 12, 2020
• Medium 6.1
  CVE-2020-4727

  IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By pe…

  IBM InfoSphere Information Server
  Sep 25, 2020
• Medium 5.7
  CVE-2020-4632

  IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted…

  IBM InfoSphere Information Server
  Sep 4, 2020
• Medium 6.4
  CVE-2020-4702

  IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to…

  IBM InfoSphere Information Server
  Sep 4, 2020
• High 8.1
  CVE-2020-4305

  IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the s…

  IBM InfoSphere Information Server
  Jul 9, 2020
• Medium 5.4
  CVE-2020-4298

  IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows…

  IBM InfoSphere Information Server
  May 19, 2020
• Medium 4.3
  CVE-2020-4286

  IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an…

  IBM InfoSphere Information Server
  May 19, 2020