IBM Infosphere Information Server / Datastage 11.5 Command Execution / Bypass Vulnerabilities

IBM Infosphere Information Server / Datastage versions 9.1, 11.3, and 11.5 including Cloud version 11.5 suffer from bypass, XML external entity injection, DLL side loading, and various other vulnerabilities. title: Multiple Vulnerabilities product: IBM Infosphere Information Server / Datastage...

CVE-2017-1383

CVE-2017-1383 affects IBM InfoSphere Information Server (DataStage) versions 9.1, 11.3, 11.5 (and related DataStage/Information Server components). The flaw is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or exhaust mem...