CVE-2014-0933: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-0561: IBM InfoSphere Data Explorer information disclosure

CVE-2013-0561 affects IBM InfoSphere Data Explorer where some SSL pages are incorrectly cached. An attacker who can access cached pages viewed by a legitimate user may view sensitive information from those pages. The description notes cacheability issue but does not provide exploitation details o...

CVE-2013-0564: IBM InfoSphere Data Explorer cross-site request forgery

CVE-2013-0564 concerns IBM InfoSphere Data Explorer and describes a cross-site request forgery (CSRF) vulnerability due to insufficient safeguards. An attacker can lure a legitimate, already-authenticated user to open a URL that executes an action on behalf of that user, potentially without the u...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0827

IBM InfoSphere Optim Workload Replay 1.1 is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2014-0827). An attacker can entice a user to open a crafted URL to inject arbitrary scripts/HTML, potentially access or exfiltrate sensitive data. The vendor lists IBM InfoSphere Optim Workload...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3871

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay version 1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the affected...

CVE-2014-0827: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-3998

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2013-3997

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-3997

The CVE-2013-3997 issue affects IBM InfoSphere BigInsights Web Application Enterprise Console (versions 1.1–2.1). The vulnerability is an open redirect that can be abused by authenticated users to redirect others to arbitrary sites, enabling phishing. Root cause details indicate improper input ha...

CVE-2013-3997

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-3998

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2013-3998

CVE-2013-3998 affects IBM InfoSphere BigInsights Web Application Enterprise Console (versions 1.1–2.1). The root cause is a CRLF injection that allows remote authenticated users to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Impact stated in sources ...

PT-2014-2730

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2 Description The issue concerns a CRLF injection vulnerability in the Web Application Enterprise Console. This allows remote authenticated users to inject arbitrary HTTP headers and...

CVE-2013-3998: Improper Control of Generation of Code

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

PT-2014-2729

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For IBM InfoSphere BigInsights versio...