Ibm

Infosphere Information Server

174 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2018-1454

  • EPSS 0.29%
  • Veröffentlicht 05.06.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:59:51

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sens...

5.5

CVE-2016-0250

  • EPSS 0.26%
  • Veröffentlicht 12.03.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 02:41:21

XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-...

7.8

CVE-2017-1469

  • EPSS 0.1%
  • Veröffentlicht 14.08.2017 22:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468.

9.1

CVE-2017-1383

  • EPSS 0.58%
  • Veröffentlicht 02.08.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resourc...

8.1

CVE-2017-1467

  • EPSS 0.56%
  • Veröffentlicht 02.08.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466.

7.8

CVE-2017-1468

  • EPSS 0.06%
  • Veröffentlicht 02.08.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.

4.9

CVE-2017-1495

  • EPSS 0.26%
  • Veröffentlicht 02.08.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.

6.1

CVE-2017-1321

  • EPSS 0.28%
  • Veröffentlicht 12.07.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials ...

4.7

CVE-2015-7493

  • EPSS 0.03%
  • Veröffentlicht 08.02.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.

5.4

CVE-2016-8999

  • EPSS 0.27%
  • Veröffentlicht 01.02.2017 22:59:01
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.