CVE-2013-3040: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack...

PT-2013-2443

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions prior to 8.5 FP4 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server version 9.1 Description The issue allows remote authenticated users to inject arbitrary we...

PT-2013-4114

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions prior to 8.5 FP4 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server version 9.1 Description The issue allows remote attackers to enumerate user accounts via a...

CVE-2013-3995

Cross-site scripting XSS vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3996

IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site...

CVE-2013-3992

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Design/Logic Flaw

IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3995

Cross-site scripting XSS vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3992

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-3992

CVE-2013-3992 is an CSRF vulnerability in IBM InfoSphere BigInsights 2.0–2.1. The IBM advisory lists affected platforms as BigInsights v1.1–2.1 (Linux shown) and provides remediation via the 2.1 Fix Pack (2.1.0.1). Other fixes include contacting support for older versions (1.1–2.0). The vulnerabi...

CVE-2013-3995

IBM InfoSphere BigInsights (versions 1.1–2.1) contains a cross-site scripting (XSS) vulnerability (CVE-2013-3995) that could allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The IBM advisory for related CVEs notes fixes for version 2.1 (2.1.0.1 Fix ...

CVE-2013-3996

IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site...

CVE-2013-3996

CVE-2013-3996 affects IBM InfoSphere BigInsights v1.1–v2.1. The issue is a flaw in how FRAME elements are handled, enabling phishing via a crafted web site when the user is authenticated. The IBM bulletin confirms vulnerability to phishing through frames and cross-site scripting-type risks, with ...

CVE-2013-3996: Improper Input Validation

IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site...

CVE-2013-3995: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4776

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 1.1 through 2.1 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...

PT-2013-4777

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 1.1 through 2.1 Description The issue makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site, due to improper handling of FRAME elements. Recommendations For versio...

PT-2013-4775

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 2.0 through 2.1 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of unspecified victims. Recommendations For IBM InfoSphere BigInsights...