The vulnerability in the web interface of the IBM InfoSphere Information Server’s data integration software allows a perpetrator to execute arbitrary JavaScript code and gain unauthorized access to protected information.

The vulnerability of the web interface of the IBM InfoSphere Information Server software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and gain...

PT-2023-19843 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing dot dot sequences ../ to view arbitrary files on the...

PT-2023-19844 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a local user to obtain sensitive information from log files. Recommendations: For IBM InfoSphere Information Server version 11.7, consider restricting access to log...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2023-07922)

IBM InfoSphere Information Server is a data integration platform from International Business Machines Corporation IBM. IBM InfoSphere Information Server version 11.7 contains a cross-site scripting vulnerability that allows users to embed arbitrary JavaScript code in the Web UI via cross-site...

CVE-2023-23475

IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...

Cross site scripting

IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...

CVE-2023-23475 IBM Infosphere Information Server cross-site scripting

IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423...

CVE-2023-23475

IBM Infosphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Affected product/version: InfoSphere Information Server 11.7. IBM’s sec...

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2023-24964)

Summary An information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-24964 DESCRIPTION: IBM InfoSphere Information Server could allow a local user to obtain sensitive information from a log files. CVSS Base score: 6.2 CVSS Tempor...

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Infosphere Information Server version 11.7, which stems from the presence of cross-site scripting that could be exploited by an attacker to...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2022-47983)

Summary A cross-site scripting vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-47983 DESCRIPTION: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in...

CVE-2022-47983

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...

CVE-2022-47983 IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161...

CVE-2022-47983

The vulnerability CVE-2022-47983 affects IBM InfoSphere Information Server 11.7 where the Web UI is vulnerable to cross-site scripting, allowing attackers to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Root cause: lack of input/output sanitization in the ...

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines Corporation IBM. IBM InfoSphere Information Server version 11.7 contains a cross-site scripting vulnerability that allows users to embed arbitrary JavaScript code in the Web UI via cross-site...

Security Bulletin: IBM Infosphere Information Server is vulnerable to cross-site scripting (CVE-2023-23475)

Summary A cross-site scripting vulnerability in IBM Infosphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-23475 DESCRIPTION: IBM Infosphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

PT-2023-1393 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM Infosphere Information Server version 11.7 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...

Security Bulletin: A vulnerability in OpenSSL affects IBM InfoSphere Information Server (CVE-2022-0778)

Summary A vulnerability in OpenSSL used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing certificates. By using a specially-crafted...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM InfoSphere Information Server

Summary Multiple vulnerabilities in OpenSSL used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-1292 DESCRIPTION: OpenSSL could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper validation of...