3721 matches found
CVE-2025-3629 IBM InfoSphere Information Server file manipulation
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...
CVE-2025-3629
CVE-2025-3629 affects IBM InfoSphere Information Server versions 11.7.0.0–11.7.1.6. The root cause is improper ownership management, enabling an authenticated user to delete another user’s comments (impacting integrity). CVSS v3.1 base score 4.3 (Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A...
CVE-2025-3221
CVE-2025-3221: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by a Denial of Service due to insufficient validation of incoming request resources. The vulnerability has CVSS v3.1 base score 7.5 (HIGH), with network access, low attack complexity, no privileges re...
CVE-2025-3221 IBM InfoSphere Information Server denial of service
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2025-3221 IBM InfoSphere Information Server denial of service
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2025-3629: Improper Ownership Management
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...
CVE-2025-3221: Allocation of Resources Without Limits or Throttling
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server versions 11.7.0.0 through...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in netty-handler (CVE-2025-24970)
Summary A vulnerability in Netty that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-24970 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to denial of service (CVE-2025-3221)
Summary A denial of service vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-3221 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request...
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to improper ownership management (CVE-2025-3629)
Summary A vulnerability due to improper ownership management in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-3629 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to delete another user's comments due to improper ownership...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Jinja (CVE-2025-27516)
Summary A vulnerability in Jinja that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allow...
PT-2025-26504 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue allows an authenticated user to delete another user's comments due to improper ownership management. Recommendations: For versions 11.7.0.0 through...
PT-2025-26502 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue is caused by insufficient validation of incoming request resources, which could allow a remote attacker to cause a denial of service. Recommendations:...
IBM InfoSphere Information Server Data Transmission Unauthorized Access
The vulnerability of the IBM InfoSphere Information Server software platform is related to the transfer of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server Unauthorized Access
The vulnerability of the IBM InfoSphere Information Server software platform is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server Unauthorized Access
The vulnerability of the IBM InfoSphere Information Server software platform is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-12569)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...
IBM InfoSphere Information Server Unencrypted Storage
The vulnerability of the IBM InfoSphere Information Server software platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data...
