CVE-2018-1994

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494...

Sql injection

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494...

CVE-2018-1994

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494...

CVE-2018-1994

CVE-2018-1994 affects IBM InfoSphere Metadata Asset Manager and InfoSphere Information Server on Cloud (ported to versions 11.5 and 11.7). The vulnerability is SQL injection in the Oracle/SQL-side handling that could allow a remote attacker to view, add, modify, or delete data in the back-end dat...

CVE-2018-1994: Improper Neutralization of Special Elements used in an SQL Command

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494...

PT-2019-9948

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.5 through 11.7 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end databas...

IBM InfoSphere Metadata Asset Manager and InfoSphere Information Server on Cloud SQL Injection Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A SQL injection vulnerability exists in IBM InfoSphere Metadata Asset Manager and InfoSphere Information...

Security Bulletin: A vulnerability in Apache Solr affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Solr was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2017-12629 DESCRIPTION: Apache Lucene could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of XML External Entity XXE entries...

CVE-2018-1906

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663...

CVE-2018-1917

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

Design/Logic Flaw

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663...

Information disclosure

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

CVE-2018-1906

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663...

CVE-2018-1917

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

CVE-2018-1906

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663...

CVE-2018-1906

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2018-1906, an Improper Authentication vulnerability that could allow an authenticated user to download code via a specially crafted HTTP request. According to IBM’s advisory, affected products include InfoSphere I...

CVE-2018-1917

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

CVE-2018-1917

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2018-1917, an information-disclosure flaw that could allow an authenticated user to access JSP files and disclose sensitive information. IBM’s security bulletin provides remediation by upgrading to 11.7.1.0 (and r...

PT-2019-9726

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 Description The issue allows an authenticated user to download code using a specially crafted HTTP request. Recommendations For IBM InfoSphere Information Server versions 11.3,...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...