16 matches found
EUVD-2025-209023
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user...
CVE-2025-14974
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference IDOR...
CVE-2026-1015
Summary: CVE-2026-1015 affects IBM InfoSphere Information Server, with a server-side request forgery (SSRF) vulnerability. Affected versions: 11.7.0.0 to 11.7.1.6. Impact: potential for an authenticated attacker to send unauthorized requests from the system, enabling network enumeration or relate...
CVE-2026-2484 IBM InfoSphere Information Server Information Disclosure
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages...
CVE-2025-14974
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference IDOR...
CVE-2026-1262
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability...
CVE-2025-14790
CVE-2025-14790 affects IBM InfoSphere Information Server (versions 11.7.0.0–11.7.1.6). The IBM bulletin describes a sensitive information disclosure due to insufficiently protected credentials (CWE-522). Impact is information exposure without exploitation details provided. Remediation: upgrade to...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a data integration platform developed by the American multinational company International Business Machines IBM. This platform can be used to integrate data from various sources. Versions of IBM InfoSphere Information Server 11.7.1.6 and earlier contain securi...
IBM InfoSphere DataStage Flow Designer 跨站请求伪造漏洞
IBM InfoSphere DataStage Flow Designer is a web-based data stage process designer developed by IBM. Versions of IBM InfoSphere DataStage Flow Designer 11.7.1.6 and earlier contained a cross-site request forgeing vulnerability. This vulnerability was exploitable by cross-site request forgery...
PT-2026-28112
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference IDOR...
PT-2026-28121
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability...
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference (CVE-2025-14974)
Summary A vulnerability due to Insecure Direct Object Reference in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-14974 DESCRIPTION: IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference IDOR. CWE:CWE-639: Authorization Bypa...
CVE-2026-1265
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file...
PT-2026-22814
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity XXE vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server...
IBM InfoSphere Information Server 代码问题漏洞
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A code issue vulnerability exists in IBM InfoSphere Information Server versions 11.7.0.0 through...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server versions 11.7.0.0 through...