CVE-2016-1343

The XML parser in Cisco Information Server CIS 6.2 allows remote attackers to read arbitrary files or cause a denial of service CPU and memory consumption via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCuy39059...

Cisco Information Server XML Parser Denial of Service Vulnerability

Cisco Information Server is a Java-based information server that is the foundation of the Cisco Data Virtualization Suite. The default configuration of Cisco Information Server's XML parser fails to properly process XML external entities when parsing XML files, allowing remote attackers to perfor...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access restrictions

The vulnerability of the InfoSphere Information Server software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by modifying the cookie file...

IBM InfoSphere Information Server Security Bypass Vulnerability (CNVD-2016-01478)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server. A remote attacker could exploit the...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

CVE-2015-7490

CVE-2015-7490 affects IBM InfoSphere Information Server: versions 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5. An attacker with a valid login could modify the user cookie to bypass access restrictions and access information intended for another user. IBM...

The vulnerability of the InfoSphere Information Server software platform allows a perpetrator to circumvent existing access restrictions and gain access to protected information.

The vulnerability of the InfoSphere Information Server software lies in its lack of access control mechanisms for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions and gain access to protected information...

IBM InfoSphere Information Server Information Disclosure Vulnerability

IBM InfoSphere Information Server is an American IBM company a set of software that can help enterprises to get information from the complex information dispersed in their systems. An information disclosure vulnerability exists in IBM InfoSphere Information Server 11.3 and 11.5. It allows an...

CVE-2015-5021

IBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to bypass intended job-execution restrictions or obtain sensitive information via unspecified vectors...

CVE-2015-5021

Affected product: IBM InfoSphere Information Server (DataStage) 11.3 and 11.5. Description: A privilege/escalation vulnerability allows an authenticated DataStage user to bypass job-execution restrictions or view sensitive information via unspecified vectors. Root cause: not explicitly detailed i...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the InfoSphere Information Server software installer is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information using standard commands...

CVE-2015-1901

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands...

Command injection

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands...

CVE-2015-1901

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands...

CVE-2015-1901

IBM InfoSphere Information Server installer vulnerability (CVE-2015-1901) affects InfoSphere Information Server 8.5, 8.7, 9.1, and 11.3, with the issue arising during installation where a local user could execute commands and expose sensitive information. The IBM security bulletin lists the remed...

IBM InfoSphere Information Server Installer Local Information Disclosure Vulnerability

IBM InfoSphere Information Server is a data integration software platform that helps organizations get more value out of complex, heterogeneous information scattered across systems. A security vulnerability in the IBM InfoSphere Information Server installer during installation allows local users ...

Design/Logic Flaw

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...

CVE-2015-0180

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...

CVE-2015-0180

The IBM InfoSphere Information Server Connector Migration Tool (affecting 8.1–11.3) allows a user with a limited role to create/modify/delete certain jobs they should not access. The root cause is a rights/permission validation flaw within the Connector Migration Tool that bypasses intended restr...