Multiple IBM products open to redirection vulnerabilities (CNVD-2019-39758)

IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog, and InfoSphere Information Server on Cloud are products of IBM Corporation of the U.S.A. IBM IBM InfoSphere Information Server on Cloud is a cloud-based data integration platform, and IBM InfoSphere Information...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by an Improper Access Control vulnerability

Summary An Improper Access Control vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2018-1899 DESCRIPTION: IBM InfoSphere Information Server could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due...

CVE-2018-1875

IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed ...

Cross-Site Scripting Vulnerability in Multiple IBM Products

IBM InfoSphere Information Governance Catalog IGC, formerly known as InfoSphere Business Information Exchange and IBM InfoSphere Information Server Framework ISF are both products of IBM Corporation. IGC is a set of solutions that provide comprehensive information integration capabilities and IT...

IBM InfoSphere Information Governance Catalog XXE Injection Vulnerability

IBM InfoSphere Information Governance Catalog IGC, formerly known as InfoSphere Business Information Exchange is a suite of solutions from IBM that provides comprehensive information integration capabilities and IT asset management. An XXE injection vulnerability exists in IBM InfoSphere IGC...