3721 matches found
CVE-2013-5440: Exposure of Sensitive Information to an Unauthorized Actor
IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...
PT-2013-5542
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.0 through 9.1 Description The issue allows local users to obtain sensitive information in certain circumstances by leveraging the presence of file content after a failed installation. Recommendation...
CVE-2013-4036
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...
CVE-2013-4036
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...
CVE-2013-4036
CVE-2013-4036 affects IBM InfoSphere Master Data Management products: InfoSphere Master Data Management Server for Product Information Management (PIM) versions 9.0/9.1 and Collaborative Edition (MDMCS) versions 10.0/10.1/11.0. The vulnerability is an XSS due to improper validation of user-suppli...
CVE-2013-4036: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...
PT-2013-4805
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x before 9.1 FP13 IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x before 10.1 FP7 IBM InfoSphere Master Data Management -...
Oracle Java SE CVE-2013-5838 Remote Security Vulnerability
Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...
CVE-2013-4056
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2013-4056
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2013-4056
CVE-2013-4056 affects IBM InfoSphere Information Server components Data Quality Console and Information Analyzer (IBM InfoSphere Data Quality Console 9.1 and Information Analyzer 8.7 and 9.1 on all platforms). Root cause: cross-site request forgery (CSRF) that can allow an attacker to trigger act...
CVE-2013-4056: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
PT-2013-4822
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0 Description A cross-site request forgery CSRF issue affects the Data Quality Console and Information Analyzer components,...
CVE-2013-4066
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...
CVE-2013-4067
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors...
Design/Logic Flaw
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...
Design/Logic Flaw
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors...
CVE-2013-4066
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...