CVE-2020-4162

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2020-4162

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by a cross-site scripting vulnerability

Summary A cross-site scripting vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2020-4162 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Information Disclosure vulnerability CVE-2019-4628

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4628 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to obtain sensitive information due to incomplete filtering of user input...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by a Cross-Site Request Forgery vulnerability CVE-2019-4626

Summary A Cross-Site Request Forgery vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4626 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Input validation vulnerability CVE-2019-4627

Summary An Input validation vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4627 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th...

CVE-2013-0507

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability...

CVE-2013-0507

CVE-2013-0507 affects IBM InfoSphere Information Server (versions 8.1, 8.5, 8.7, 9.1). The root cause is that the session identifier is not updated after successful authentication, enabling potential session fixation. The IBM Security Bulletin lists the affected platforms and versions, noting tha...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Cross-site request forgery (CVE-2019-4407 CVE-2019-4757)

Summary A Cross-site request forgery vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2019-4407 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL CVE-2019-1552

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw programs or Windows program...

Security Bulletin: A vulnerability in Apache Commons Compress affects IBM InfoSphere Information Server connectivity componets

Summary A vulnerability in Apache Commons Compress was addressed by IBM InfoSphere Information Server Cloud related connectors. Vulnerability Details CVEID: CVE-2018-11771 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by the failure to return the correct EOF...

Security Bulletin: IBM InfoSphere Information Governance Catalog is affected by a privilege escalation vulnerability

Summary A privilege escalation vulnerability was addressed in InfoSphere Information Governance Catalog. Vulnerability Details CVEID: CVE-2019-4607 DESCRIPTION: IBM InfoSphere Information Governance Catalog could allow an authorized user to access details of both governance and information assets...

IBM InfoSphere Information Server on Cloud and IBM InfoSphere Information Analyzer Template Injection Vulnerability

IBM InfoSphere Information Server on Cloud and IBM InfoSphere Information Analyzer are both products of IBM Corporation, U.S.A. IBM InfoSphere Information Server on Cloud is a cloud-based data IBM InfoSphere Information Analyzer is a data analysis component. IBM InfoSphere Information Analyzer is...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2019-39757)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be exploited by...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2019-40094)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server, which can be...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Reflected Cross-site scripting (CVE-2019-4469)

Summary A Reflected Cross-site scripting vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2019-4469 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

Security Bulletin: A vulnerability in Apache Commons BeanUtils affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Commons BeanUtils was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2014-0114 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Cla...

Security Bulletin: A vulnerability in Apache Ant affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Ant was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2012-2098 DESCRIPTION: Apache Commons Compress and Apache Ant are vulnerable to a denial of service, caused by an error when using bzip2 compression to compress files. By...

Security Bulletin: Multiple vulnerabilities in Xstream affect IBM InfoSphere Information Server

Summary Multiple vulnerabilities in XStream was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2013-7285 DESCRIPTION: XStream could allow a remote attacker to execute arbitrary code on the system, caused by an error in the XMLGenerator API. An attacker could...

IBM InfoSphere Information Server on Cloud and IBM InfoSphere Information Server Information Disclosure Vulnerabilities

IBM InfoSphere Information Server on Cloud and IBM InfoSphere Information Server are both products of IBM Corporation, U.S.A. IBM InfoSphere Information Server on Cloud is a set of cloud-based data consolidation IBM InfoSphere Information Server is a data integration platform. IBM InfoSphere...