CVE-2013-3993

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls...

CVE-2013-3993

CVE-2013-3993 affects IBM InfoSphere BigInsights prior to 2.1.0.3. The issue arises from insufficient validation in unspecified APIs, allowing remote authenticated users to bypass file/dir restrictions and access untrusted data or code. Affected versions include 1.1 through 3.0; fixes are provide...

CVE-2013-3993

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

PT-2014-2049 · Ibm · Ibm Infosphere Biginsights

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere BigInsights versions prior to 2.1.0.3 Description: The issue is related to insufficient access restrictions in IBM InfoSphere BigInsights, allowing remote authenticated users to bypass intended file and directory restrictions o...

CVE-2014-0933

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-0933

The CVE-2014-0933 entry concerns a CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 that allows remote attackers to hijack the authentication of arbitrary users. The vulnerability affects the product as described in the NVD entry, which lists Cross-site r...

CVE-2014-0933

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-0561: IBM InfoSphere Data Explorer information disclosure

CVE-2013-0561 affects IBM InfoSphere Data Explorer where some SSL pages are incorrectly cached. An attacker who can access cached pages viewed by a legitimate user may view sensitive information from those pages. The description notes cacheability issue but does not provide exploitation details o...

CVE-2013-0564: IBM InfoSphere Data Explorer cross-site request forgery

CVE-2013-0564 concerns IBM InfoSphere Data Explorer and describes a cross-site request forgery (CSRF) vulnerability due to insufficient safeguards. An attacker can lure a legitimate, already-authenticated user to open a URL that executes an action on behalf of that user, potentially without the u...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0827

IBM InfoSphere Optim Workload Replay 1.1 is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2014-0827). An attacker can entice a user to open a crafted URL to inject arbitrary scripts/HTML, potentially access or exfiltrate sensitive data. The vendor lists IBM InfoSphere Optim Workload...

CVE-2013-3997

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-3998

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2013-3997

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-3997

The CVE-2013-3997 issue affects IBM InfoSphere BigInsights Web Application Enterprise Console (versions 1.1–2.1). The vulnerability is an open redirect that can be abused by authenticated users to redirect others to arbitrary sites, enabling phishing. Root cause details indicate improper input ha...