Ibm

Infosphere Information Server

169 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2017-1468

  • EPSS 0.06%
  • Published 02.08.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.

4.9

CVE-2017-1495

  • EPSS 0.26%
  • Published 02.08.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.

6.1

CVE-2017-1321

  • EPSS 0.28%
  • Published 12.07.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials ...

4.7

CVE-2015-7493

  • EPSS 0.05%
  • Published 08.02.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.

5.4

CVE-2016-8999

  • EPSS 0.27%
  • Published 01.02.2017 22:59:01
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

8.1

CVE-2016-6059

  • EPSS 0.36%
  • Published 01.02.2017 20:59:02
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or cons...

6.1

CVE-2016-5984

  • EPSS 0.21%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls....

6.5

CVE-2016-5994

  • EPSS 0.29%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents.

3.5

CVE-2015-7490

  • EPSS 0.13%
  • Published 03.03.2016 22:59:09
  • Last modified 12.04.2025 10:46:40

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.

5.5

CVE-2015-5021

  • EPSS 0.25%
  • Published 04.11.2015 03:59:04
  • Last modified 12.04.2025 10:46:40

IBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to bypass intended job-execution restrictions or obtain sensitive information via unspecified vectors.