2027 matches found
PT-2013-1484
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 8.7 IBM InfoSphere Metadata Workbench MWB versions 8.1 through 8.7 IBM InfoSphere Information Server 8.5 before FP3 Description A cross-site scripting XSS issue allows remote attackers to...
CVE-2012-4819: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers ...
CVE-2012-3309
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...
Design/Logic Flaw
The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2012-3309
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...
PT-2012-4642
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.2 and earlier Description A cross-site request forgery CSRF issue exists in the account-creation panel. This allows remote attackers to hijack the authentication of administrators for requests that create...
CVE-2012-3309: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...
CVE-2012-3312: Undefined Security Weakness
The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
PT-2012-4644
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.2 and earlier Description The issue concerns the transmission of cleartext database credentials over the network when the save-password setting is enabled in the datasource definition editor. This allows remo...
CVE-2011-3124
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...
Information disclosure
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
CVE-2011-3123
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
PT-2011-4255
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 IBM InfoSphere DataStage versions 8.5 and 8.5.0.1 Description The issue allows local users to gain privileges via unknown vectors due to incorrect ownership assignment to unspecified...
CVE-2011-3124: Undefined Security Weakness
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...
CVE-2011-3123: Undefined Security Weakness
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
PT-2011-4254
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 IBM InfoSphere DataStage versions 8.5 and 8.5.0.1 Description The issue is related to weak permissions for unspecified files, which allows local users to gain privileges. The estimated...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Buffer overflow
Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...