CVE-2022-40747: Improper Restriction of XML External Entity Reference

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."...

CVE-2022-22442: Improper Access Control

"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."...

CVE-2022-35717: Improper Neutralization of Special Elements used in an OS Command

"IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361...

PT-2022-15424 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to CSV Injection, where a remote attacker could execute arbitrary commands on the system due to improper validation of csv file contents. Recommendations: For IB...

CVE-2022-22425

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."...

CVE-2022-40747

CVE-2022-40747 affects IBM InfoSphere Information Server 11.7. It is an XML External Entity Injection (XXE) vulnerability when processing XML data, potentially exposing sensitive information or consuming memory resources. Remediation in the connected Red Hat/IBM bulletin indicates upgrading to In...

CVE-2022-40747

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."...

CVE-2022-40235

CVE-2022-40235 affects IBM InfoSphere Information Server 11.7. The vulnerability stems from improper input validation and can cause a denial of service by removing the ability to run jobs. According to IBM’s bulletin, affected product is InfoSphere Information Server 11.7 and remediation is to up...

CVE-2022-22442

CVE-2022-22442 affects IBM InfoSphere Information Server 11.7. The issue is an access control error that could allow an authenticated user to access information restricted to elevated-privilege users, per multiple sources. The root cause is improper access controls leading to an information‑discl...

PT-2022-15434 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to improper access controls, which could allow an authenticated user to access information restricted to users with elevated privileges. Recommendations: For IBM...

IBM InfoSphere Information Server security vulnerabilities

IBM InfoSphere Information Server is a data integration platform from IBM Corporation. IBM InfoSphere Information Server version 11.7 has an access control error vulnerability. An authenticated attacker could use the vulnerability to access information that only a more privileged user has access ...

IBM InfoSphere Information Server code-related vulnerabilities

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM, Inc. The platform can be used to integrate data information obtained from various sources.IBM InfoSphere Information Server version 11.7 contains an XML External Entity Injection XXE...

IBM InfoSphere Information Server Input Validation Vulnerability

IBM InfoSphere Information Server is a data integration platform from IBM Corporation. IBM InfoSphere Information Server version 11.7 contains a denial of service vulnerability that originates from an input validation error. An attacker could exploit this vulnerability to cause a denial of servic...

IBM InfoSphere Information Server Cross-Site Script Vulnerability

IBM InfoSphere Information Server is a data integration platform from IBM in the United States. The platform can be used to integrate data information obtained from various sources.A cross-site scripting vulnerability exists in IBM InfoSphere Information Server. An attacker could exploit the...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management

Summary IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

Security Bulletin: Multiple denial of service vulnerabilities in Apache Xerces affect IBM InfoSphere Information Server

Summary Multiple denial of service vulnerabilities in Apache Xerces used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-23437 DESCRIPTION: Apache Xerces2 Java XML Parser is vulnerable to a denial of service, caused by an infinite loop in the XML parser. ...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to OS command injection

Summary An OS command injection vulnerability in InfoSphere Information Server was addressed. Vulnerability Details IBM X-Force ID: 231361 DESCRIPTION: IBM InfoSphere Information Server could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in moment.js (CVE-2022-31129)

Summary A denial of service vulnerability in moment.js used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-31129 DESCRIPTION: Moment is vulnerable to a denial of service, caused by inefficient regular expression complexity. By sending a specially-crafted...

Security Bulletin: A vulnerability in Apache Commons Configuration affects IBM InfoSphere Information Server [CVE-2022-33980]

Summary A vulnerability in Apache Commons Configuration used by IBM InfoSphere Information Server was addressed. CVE-2022-33980 Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons Configuration could allow a remote attacker to execute arbitrary code on the system, caused by a...

Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server

Summary Multiple vulnerabilities in Apache Santuario XML Security for Java used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2009-0217 DESCRIPTION: Multiple vendor applications that utilize the W3C XML Signature Syntax and Processing XMLDsig recommendation...