Security Bulletin: IBM InfoSphere Information server is vulnerable to SWEET32 Birthday attack (CVE-2016-2183)

Summary IBM InfoSphere Information server is vulnerable to SWEET32 Birthday attack through weak cipher suites. Vulnerability Details CVEID:CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of...

CVE-2022-30608

"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Force ID: 227295...

CVE-2022-35717

CVE-2022-35717 affects IBM InfoSphere Information Server 11.7. The vulnerability is an OS command injection allowing a locally authenticated attacker to run arbitrary commands via a specially crafted request. Impact per sources includes high Confidentiality, Integrity, and Availability. Remediati...

CVE-2022-22442

CVE-2022-22442 affects IBM InfoSphere Information Server 11.7. The issue is an access control error that could allow an authenticated user to access information restricted to elevated-privilege users, per multiple sources. The root cause is improper access controls leading to an information‑discl...

PT-2022-22948 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: A locally authenticated attacker could execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM InfoSphere Information Server version...

CVE-2022-40235

"IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation. IBM X-Force ID: 235725."...

PT-2022-20207 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...

CVE-2022-30615

"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592...

CVE-2022-22425

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."...

PT-2022-15424 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to CSV Injection, where a remote attacker could execute arbitrary commands on the system due to improper validation of csv file contents. Recommendations: For IB...

IBM InfoSphere Information Server 代码问题漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM, Inc. The platform can be used to integrate data information obtained from various sources.IBM InfoSphere Information Server version 11.7 contains an XML External Entity Injection XXE...

CVE-2022-40747

CVE-2022-40747 affects IBM InfoSphere Information Server 11.7. It is an XML External Entity Injection (XXE) vulnerability when processing XML data, potentially exposing sensitive information or consuming memory resources. Remediation in the connected Red Hat/IBM bulletin indicates upgrading to In...

CVE-2022-35642

CVE-2022-35642 affects IBM InfoSphere Information Server 11.7. The vulnerability is a cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Root cause details indicate a stored XSS issue in the Web UI....

CVE-2022-22442

"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."...

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a data integration platform from IBM in the United States. The platform can be used to integrate data information obtained from various sources.A cross-site scripting vulnerability exists in IBM InfoSphere Information Server. An attacker could exploit the...

CVE-2022-30608

CVE-2022-30608: IBM InfoSphere Information Server 11.7 is affected by a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, unauthorized actions transmitted from a trusted user. Public sources (IBM bulletin) confirm affected product/version and provi...

CVE-2022-35642

"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592."...

IBM InfoSphere Information Server 操作系统命令注入漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM, Inc. IBM InfoSphere Information Server version 11.7 contains an operating system command injection vulnerability that can be exploited by a locally authenticated attacker to execute arbitrar...

PT-2022-25300 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a user to cause a denial of service by removing the ability to run jobs due to improper input validation. Recommendations: For IBM InfoSphere Information Server...

CVE-2022-40747

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."...