CVE-2017-1495: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693...

PT-2017-13616

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows a local user to gain elevated privileges by placing arbitrary files in installation directories. Recommendations For IBM InfoSphere Information Server...

IBM Information Server Framework and InfoSphere Information Server on Cloud Cross-Site Scripting Vulnerability

IBM Information Server Framework and InfoSphere Information Server on Cloud are both products of the U.S. company IBM. The former is a set of data integration platform framework; the latter is a set of cloud-based data integration platform. A cross-site scripting vulnerability exists in IBM...

Cross site scripting

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2017-1321

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2017-1321

IBM InfoSphere Information Server (Framework) and InfoSphere Information Server on Cloud are affected by CVE-2017-1321 (XSS). The vulnerability arises from improper validation of user-supplied input, allowing remote attackers to embed arbitrary JavaScript in the Web UI, potentially leading to cre...

CVE-2017-1321: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

PT-2017-12961

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2017-0055: Improper Neutralization of Input During Web Page Generation

Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run...

PT-2017-1601

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 Description T...

Information disclosure

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information...

CVE-2015-7493

CVE-2015-7493 affects IBM InfoSphere Information Server. The IBM Security Bulletin confirms a local attacker could run commands during installation, potentially exposing sensitive information. Affected versions include 8.5, 8.7, 9.1, 11.3, and 11.5. Remediation involves applying fixes, e.g., JR55...

CVE-2015-7493

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information...

PT-2017-7205

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server affected versions not specified Description The issue allows a local user under special circumstances to execute commands during installation processes, potentially exposing sensitive information...

CVE-2015-7493: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2017-01311)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.5. An attacker can exploit...

CVE-2016-8999

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS...

CVE-2016-8982

IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history...

Path traversal

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS...

CVE-2016-8982

IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history...