Security Bulletin: Insecure Transmission Vulnerability with IBM InfoSphere Information Server (CVE-2015-7490)

Summary IBM InfoSphere Information Server could allow a malicious user who can login in IIS using their own user id to change the user cookie to another user id to possibly gain access to information that the other user id had access to. Vulnerability Details CVEID: CVE-2015-7490 DESCRIPTION: IBM...

CVE-2020-4741

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

CVE-2020-4741

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

Design/Logic Flaw

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150...

CVE-2020-4741

IBM InfoSphere Information Server (including InfoSphere Metadata Asset Manager) is vulnerable to a stored cross-site scripting (XSS) issue in the Web UI for versions 11.5 and 11.7. Root cause: stored XSS allowing arbitrary JavaScript in the Web UI that could lead to credentials disclosure within ...

CVE-2020-4740

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150...

CVE-2020-4740

CVE-2020-4740 applies to IBM InfoSphere Information Server 11.5 and 11.7, where an HTML-injection vulnerability could allow a remote attacker to inject HTML that runs in the victim’s browser within the hosting site’s security context. The IBM Security bulletin confirms the issue and lists affecte...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to HTML injection.

Summary An HTML injection vulnerability was addressed in IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2020-4740 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be...

Security Bulletin: IBM InfoSphere Metadata Asset Manager is vulnerable to stored cross-site scripting.

Summary A stored cross-site scripting vulnerability in IBM InfoSphere Metadata Asset Manager was addressed. Vulnerability Details CVEID: CVE-2020-4741 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: IBM InfoSphere Metadata Asset Manager is vulnerable to stored cross-site scripting and server-side request forgery.

Summary Stored cross-site scripting and server-side request forgery vulnerabilities in IBM InfoSphere Metadata Asset Manager was addressed. Vulnerability Details CVEID: CVE-2020-4702 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to stored cross-site scripting. This vulnerability...

CVE-2020-4740

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150...

CVE-2020-4741

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

IBM InfoSphere Information Server Clickjacking Vulnerability

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A clickjacking vulnerability exists in IBM InfoSphere...

CVE-2020-4727

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...

CVE-2020-4727

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...

Design/Logic Flaw

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...

CVE-2020-4727

CVE-2020-4727 affects IBM InfoSphere Information Server 11.7. A cross-frame scripting (clickjacking) vulnerability could let a remote attacker trick a user into visiting a malicious site and hijack the user’s click actions. Affected product: InfoSphere Information Server 11.7 (including Informati...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Cross-frame scripting

Summary A Cross-frame scripting vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2020-4727 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a...

CVE-2020-4727

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...

Multiple Siemens Products Validation Error Vulnerability

Siemens SIMATIC WinCC OA Open Architecture is a SCADA system from Siemens, Germany, and a component of the HMI series. The system is mainly used in industries such as rail transportation, building automation and public power supply.Information Server is used to report and visualize process data...