IBM InfoSphere Information Server XML External Entity Injection Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An XML external entity injection vulnerability exists in IBM InfoSphere Information Server versions 9.1,...

CVE-2017-1468

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

CVE-2017-1495

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693...

Design/Logic Flaw

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

CVE-2017-1467

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

CVE-2017-1383

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155...

CVE-2017-1468

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

CVE-2017-1467

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

CVE-2017-1383

CVE-2017-1383 affects IBM InfoSphere Information Server (DataStage) versions 9.1, 11.3, 11.5 (and related DataStage/Information Server components). The flaw is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or exhaust mem...

CVE-2017-1467

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

CVE-2017-1468

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

CVE-2017-1467

CVE-2017-1467 affects IBM InfoSphere Information Server (DataStage) versions 9.1, 11.3 and 11.5 with a network-layer security flaw that can cause privilege escalation or unauthorized access. The IBM Security Bulletin states no remediation/fixes are available in the public page, and recommends acc...

CVE-2017-1468

IBM InfoSphere Information Server versions 9.1, 11.3, 11.5 and 11.7 are affected by CVE-2017-1468, a local privilege-escalation vulnerability where a local user can gain elevated privileges by placing arbitrary files in installation directories. CVSS Base Score reported as 8.4; vector indicates l...

CVE-2017-1495

CVE-2017-1495 affects IBM InfoSphere Information Server and Information Server on Cloud. IBM’s Security Bulletin describes that a highly privileged user could cause the application to generate a memory dump containing highly sensitive information, including access credentials. Affected products/v...

PT-2017-13140

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows for a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consum...

CVE-2017-1495: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693...

CVE-2017-1467: Undefined Security Weakness

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466...

PT-2017-13615

Name of the Vulnerable Software and Affected Versions InfoSphere Information Server versions 9.1, 11.3, 11.5 Description A network layer security issue can lead to privilege escalation or unauthorized access. Recommendations For version 9.1, update to a fixed version to resolve the issue. For...

CVE-2017-1383: Improper Restriction of XML External Entity Reference

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155...

PT-2017-13774

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows a privileged user to cause a memory dump, potentially exposing highly sensitive information, including access credentials. Recommendations For IBM...