Lucene search
+L

3722 matches found

CVE
CVE
•added 2022/04/28 4:10 p.m.•109 views

CVE-2022-22441

Summary: CVE-2022-22441 affects IBM InfoSphere Information Server 11.7. An authenticated user could view information about higher privileged users and groups due to a privilege escalation vulnerability. Impact (as stated): information disclosure of higher-privileged entities; no exploitation deta...

6.5CVSS6.2AI score0.009EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/28 4:10 p.m.•41 views

CVE-2022-22441

IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426...

6.5CVSS6.4AI score0.009EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/28 4:10 p.m.•92 views

CVE-2022-22427

The vulnerability CVE-2022-22427 affects IBM InfoSphere Information Server 11.7. A cross-site scripting flaw in the Web UI could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bulletin lists remediation by upgrading t...

6.1CVSS5.8AI score0.00632EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/28 4:10 p.m.•40 views

CVE-2022-22427

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720...

5.2CVSS5.9AI score0.00632EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/28 4:10 p.m.•86 views

CVE-2022-22322

CVE-2022-22322 affects IBM InfoSphere Information Server 11.7. The Web UI is vulnerable to cross-site scripting, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Affected product: InfoSphere Information Server (11.7) and Information...

5.4CVSS5.2AI score0.0048EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/28 4:10 p.m.•38 views

CVE-2022-22322

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370...

5.4CVSS5.3AI score0.0048EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/28 4:10 p.m.•91 views

CVE-2021-38952

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue enables an attacker to inject arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Root cause cited in publ...

5.4CVSS5.2AI score0.0048EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/28 4:10 p.m.•30 views

CVE-2021-38952

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408...

5.4CVSS5.3AI score0.0048EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•18 views

IBM InfoSphere Information Server Cross-Site Script Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be...

6.1CVSS5.7AI score0.00632EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•16 views

IBM InfoSphere Information Server Cross-Site Script Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•5 views

PT-2022-10816

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS0.0048EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•19 views

IBM InfoSphere Information Server security vulnerabilities

IBM InfoSphere Information Server is a data integration software platform. Its primary service is to help us be able to understand, clean, monitor, transform and deliver data. an elevation of privilege vulnerability exists in IBM InfoSphere Information Server, which could be exploited by an...

6.5CVSS5.6AI score0.009EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•18 views

IBM InfoSphere Information Server Cross-Site Script Vulnerability

IBM InfoSphere Information Server is a data integration platform from IBM in the United States. IBM InfoSphere Information Server version 11.7 contains a cross-site scripting vulnerability. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•5 views

PT-2022-15426

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

6.1CVSS0.00632EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•9 views

PT-2022-15433 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. Recommendations: For IBM InfoSphere...

6.5CVSS6.4AI score0.009EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•5 views

PT-2022-15361

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS0.0048EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•4 views

CVE-2022-22443: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440...

5.4CVSS5.8AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•7 views

CVE-2022-22427: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720...

6.1CVSS5.8AI score0.00632EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•4 views

CVE-2021-38952: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408...

5.4CVSS5.8AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•8 views

CVE-2022-22441: Undefined Security Weakness

IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426...

6.5CVSS6.7AI score0.009EPSS
SaveExploits0References1
Rows per page
Query Builder