CVE-2021-29771

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The root cause is embedded arbitrary JavaScript in the UI, potentially leading to credential disclosure within a trusted session. IBM lists remediation via upgrades: apply 11.7.1.0 or 1...

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

CVE-2021-29738

The CVE-2021-29738 issue affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7), where a server-side request forgery (SSRF) vulnerability can allow an authenticated attacker to issue unauthorized requests from the system, potentially enabling network enumeration or re...

CVE-2021-29737

The CVE-2021-29737 entry relates to IBM InfoSphere Data Flow Designer Engine within IBM InfoSphere Information Server 11.7, which is affected by improper validation of the REST API server certificate. The IBM Security Bulletin and NVD entry confirm the affected component and describe a REST certi...

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

IBM InfoSphere DataStage Flow Designer Trust Management Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2021-84238)

IBM InfoSphere Information Server is a data integration platform from IBM Corporation in the United States. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Information Server has a security vulnerability that allows users to embed arbitrary...

Unspecified Vulnerability in IBM InfoSphere Information Server (CNVD-2021-84240)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server that stems from IBM InfoSphere...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2021-84239)

IBM InfoSphere Information Server is a data integration platform from IBM Corporation. A security vulnerability exists in IBM InfoSphere Information Server, which stems from the vulnerability of IBM InfoSphere Information Server to cross-site request forgery, which could be exploited by an attack...

IBM InfoSphere DataStage Flow Designer Code Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...

Unspecified Vulnerability in IBM InfoSphere Information Server

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server, which can be exploited by attackers t...

Security Bulletin: IBM InfoSphere Information Server is affected by a XXE (XML External Entity) Injection vulnerability (CVE-2021-38948)

Summary An XXE XML External Entity Injection vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2021-38948 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Apache Commons Compress

Summary A denial of service vulnerability in Apache Commons Compress that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2021-35515 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw in the...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Marked (CVE-2017-1000427)

Summary Marked is used by a third party component that is used in IBM InfoSphere Information Server. A vulnerability in Marked was addressed. Vulnerability Details CVEID: CVE-2017-1000427 DESCRIPTION: Marked is vulnerable to cross-site scripting, caused by improper validation of user-supplied inp...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js

Summary Multiple vulnerabilities in Node.js that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2021-37701 DESCRIPTION: Node.js tar module could allow a local attacker to execute arbitrary code on the system, caused by an arbitrary file...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Dojo Toolkit (CVE-2018-15494)

Summary A vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the DataGrid component. A...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2021-29771)

Summary A cross-site scripting vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2021-29771 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in XStream (CVE-2021-29505)

Summary A vulnerability in XStream that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2021-29505 DESCRIPTION: XStream XStream could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper input validation...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site request forgery (CVE-2021-29888)

Summary A cross-site request forgery vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2021-29888 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server, which can be exploited by attackers t...