Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server (CVE-2013-4066 and CVE-2013-4067)

Abstract Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server CVE-2013-4066 and CVE-2013-4067 Content Security vulnerabilities exist in various versions of IBM Information Server or constituent products. See the individual descriptions for details...

CVE-2013-4066

CVE-2013-4066 affects IBM InfoSphere Information Server 8.0, 8.1, 8.5 (FP3), 8.7 and 9.1. An attacker can perform a clickjacking attack by overlaying the Web Console and tricking the user into clicking. IBM’s bulletin lists fixes per version: 8.0/8.1 fixes, 8.5 FP3, 8.7 FP2, and 9.1 upgrade to 9....