3721 matches found
CVE-2015-1894
Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-0180: Improper Access Control
The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...
CVE-2015-1895
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...
CVE-2015-1909
IBM InfoSphere MDM Reference Data Management is vulnerable to an XML External Entity (XXE) attack due to a weakly configured XML parser. Affected are the Reference Data Management server components for versions: 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2. Exploitation could allow...
PT-2015-5500
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 before FP3 IBM InfoSphere Master Data Management MDM versions 11.3 Description A cross-site scripting XSS issue exists i...
CVE-2015-1895: Undefined Security Weakness
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...
PT-2015-5492
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions prior to 2.1.0.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recommendations For...
PT-2015-5499
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 through 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 through 11.0 before FP3 IBM InfoSphere Master Data Management MDM version 11.3 IBM InfoSphere Master Data...
CVE-2015-1910
CVE-2015-1910 is an XSS vulnerability in IBM InfoSphere MDM Reference Data Management. The flaw affects IBM InfoSphere MDM Reference Data Management on the server side in versions 10.1 (before IF1), 11.0 (before FP3), and 11.3, allowing remote authenticated users to inject arbitrary script via a ...
CVE-2015-1894: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-1909: Exposure of Sensitive Information to an Unauthorized Actor
The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...
CVE-2015-1910
Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-1909
The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...
PT-2015-1380
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 11.3 Description The issue is related to insufficient access control in the Connector Migration Tool component, allowing remote authenticated users to bypass intended restrictions. This ca...
CVE-2015-1894
CVE-2015-1894 affects IBM InfoSphere Optim Workload Replay. The IBM advisory identifies a cross-site request forgery due to improper validation of user input that could let an attacker hijack an authenticated user’s session to perform actions, potentially enabling cross-site scripting through cra...
IBM InfoSphere Optim Workload Replay Cross-Site Request Forgery Vulnerability
IBM InfoSphere Optim Workload Replay is an IBM solution for replaying real database production activities and providing reports on the impact of changes and identifying problems quickly. A cross-site request forgery vulnerability exists in IBM InfoSphere Optim Workload Replay that allows remote...
IBM InfoSphere BigInsights SQL Component Unauthorized Access Vulnerability
IBM InfoSphere BigInsights is a set of software platform for storing and analyzing "big data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Big SQL is one of the SQL interface components. A security...
CVE-2015-1889
The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...
Design/Logic Flaw
The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...
CVE-2015-1889
The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...