CVE-2013-4058: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces...

CVE-2013-4059: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces...

PT-2014-2735

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5.x through 8.5 FP3 IBM InfoSphere Information Server versions 8.7.x through 8.7 FP2 IBM InfoSphere Information Server versions 9.1.x through 9.1.2.0 Description A cross-site request forgery CSRF...

Information disclosure

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

CVE-2013-5440

IBM InfoSphere Information Server versions 8.0, 8.1, 8.5, 8.7 and 9.1 are affected by CVE-2013-5440, where sensitive data can be written to a file after a failure during installation. The issue can occur during new installations, adding components, or maintenance updates (8.7+). Remediation invol...

CVE-2013-5440

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

CVE-2013-5440: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

PT-2013-5542

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.0 through 9.1 Description The issue allows local users to obtain sensitive information in certain circumstances by leveraging the presence of file content after a failed installation. Recommendation...

CVE-2013-4056

Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-4056

CVE-2013-4056 affects IBM InfoSphere Information Server components Data Quality Console and Information Analyzer (IBM InfoSphere Data Quality Console 9.1 and Information Analyzer 8.7 and 9.1 on all platforms). Root cause: cross-site request forgery (CSRF) that can allow an attacker to trigger act...

PT-2013-4822

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0 Description A cross-site request forgery CSRF issue affects the Data Quality Console and Information Analyzer components,...

CVE-2013-4056: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

Sql injection

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

CVE-2013-5028

Kwoksys Kwok Information Server vulnerable to SQL injection in IT/hardware-list.dll (versions before 2.8.5). Affected component is the search command handling (hardwareType, hardwareStatus, hardwareLocation) with remote-authenticated access leading to arbitrary SQL execution. Root cause is improp...

CVE-2013-5028: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

PT-2013-5338

Name of the Vulnerable Software and Affected Versions Kwok Information Server versions prior to 2.8.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the hardwareType, hardwareStatus, or hardwareLocation parameter in a search...

CVE-2013-4067

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors...

Design/Logic Flaw

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...