Cross-Site Scripting Vulnerability in Multiple IBM Products

IBM InfoSphere Information Governance Catalog IGC, formerly known as InfoSphere Business Information Exchange and IBM InfoSphere Information Server Framework ISF are both products of IBM Corporation. IGC is a set of solutions that provide comprehensive information integration capabilities and IT...

IBM InfoSphere Information Governance Catalog XXE Injection Vulnerability

IBM InfoSphere Information Governance Catalog IGC, formerly known as InfoSphere Business Information Exchange is a suite of solutions from IBM that provides comprehensive information integration capabilities and IT asset management. An XXE injection vulnerability exists in IBM InfoSphere IGC...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access control rules

The vulnerability of the Connector Migration Tool component of the InfoSphere Information Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions related to data creation and...

CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

Design/Logic Flaw

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867

IBM InfoSphere Streams (versions 4.0.1.1 and earlier; 4.1.1.0 and earlier) are affected by CVE-2016-2867 due to improper handling of the runAsUser feature, which can cause operator code to check permissions against the root group, enabling local privilege elevation. The IBM Security Bulletin conf...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

IBM InfoSphere Streams Privilege Acquisition Vulnerability

IBM InfoSphere Streams is a data analytics platform. A security vulnerability in IBM InfoSphere Streams exists when the program sets the instance runAsUser attribute, which allows a local attacker to exploit the vulnerability to check permissions using the group ID of the root user...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2016-03220)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which can be exploited by a local attacker to execute arbitrary commands during installation, exposing...

Unspecified Vulnerability in IBM InfoSphere Master Data Management Collaborative Edition

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM Collaborative Edition. An attacker could exploit the vulnerability to disclose...

IBM InfoSphere Master Data Management Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative Edition. A remote attacker could exploit this...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access restrictions

The vulnerability of the InfoSphere Information Server software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by modifying the cookie file...

IBM InfoSphere Information Server Security Bypass Vulnerability (CNVD-2016-01478)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server. A remote attacker could exploit the...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

Design/Logic Flaw

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

CVE-2015-7490

CVE-2015-7490 affects IBM InfoSphere Information Server: versions 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5. An attacker with a valid login could modify the user cookie to bypass access restrictions and access information intended for another user. IBM...

CVE-2015-7492

Cross-site scripting XSS vulnerability in Reference Data Management RDM in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...