CVE-2017-1468

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

CVE-2017-1495

CVE-2017-1495 affects IBM InfoSphere Information Server and Information Server on Cloud. IBM’s Security Bulletin describes that a highly privileged user could cause the application to generate a memory dump containing highly sensitive information, including access credentials. Affected products/v...

CVE-2017-1383

CVE-2017-1383 affects IBM InfoSphere Information Server (DataStage) versions 9.1, 11.3, 11.5 (and related DataStage/Information Server components). The flaw is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or exhaust mem...

CVE-2017-1467

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

CVE-2017-1383: Improper Restriction of XML External Entity Reference

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155...

PT-2017-13616

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows a local user to gain elevated privileges by placing arbitrary files in installation directories. Recommendations For IBM InfoSphere Information Server...

CVE-2017-1468: Undefined Security Weakness

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

CVE-2017-1467: Undefined Security Weakness

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

PT-2017-13615

Name of the Vulnerable Software and Affected Versions InfoSphere Information Server versions 9.1, 11.3, 11.5 Description A network layer security issue can lead to privilege escalation or unauthorized access. Recommendations For version 9.1, update to a fixed version to resolve the issue. For...

PT-2017-13774

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows a privileged user to cause a memory dump, potentially exposing highly sensitive information, including access credentials. Recommendations For IBM...

CVE-2017-1495: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693...

PT-2017-13140

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows for a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consum...

IBM InfoSphere Master Data Management Point Hijacking Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-21237)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

CVE-2016-9714

IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727...

CVE-2016-9716

IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119729...

CVE-2016-9718

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within...

CVE-2016-9715

IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...