EUVD-2014-0963

Malware in sbrugna...

EUVD-2012-0243

Malware in sbrugna...

EUVD-2012-0241

Malware in sbrugna...

Security Bulletin: Multiple security vulnerabilities in the IBM InfoSphere Information Server Suite.

Abstract Security Bulletin: Multiple security vulnerabilities in the IBM InfoSphere Information Server Suite. Content SUMMARY: Security vulnerabilities exist in various versions of IBM Information Server or constituent products. Note: The same fix may be listed under multiple vulnerabilities...

Security Bulletin: A vulnerability in Struts affects IBM InfoSphere Metadata Workbench

Summary A Struts vulnerability affects IBM InfoSphere Metadata Workbench. Vulnerability Details CVEID: CVE-2017-15707 DESCRIPTION: Apache Struts is vulnerable to a denial of service. By sending a specially crafted JSON request using outdated json-lib with the Struts REST plugin, a remote attacker...

Security Bulletin: Vulnerability in Apache Commons affects IBM InfoSphere Information Server (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM InfoSphere Information Server. Information about this security vulnerability has been published in a WebSphere Application Server security bulletin. Vulnerability Details CVEID:...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-0933

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-0933

The CVE-2014-0933 entry concerns a CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 that allows remote attackers to hijack the authentication of arbitrary users. The vulnerability affects the product as described in the NVD entry, which lists Cross-site r...

CVE-2014-0933

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-0205

InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly restrict use of the troubleshooting feature, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service workbench...

CVE-2012-0203

Cross-site scripting XSS vulnerability in InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly restrict use of the troubleshooting feature, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service workbench...

CVE-2012-0203

Cross-site scripting XSS vulnerability in InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0203

Cross-site scripting XSS vulnerability in InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0205

InfoSphere Metadata Workbench MWB 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly restrict use of the troubleshooting feature, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service workbench...

CVE-2012-0203

CVE-2012-0203 is an XSS vulnerability in IBM InfoSphere Information Server’s Metadata Workbench (MWB) affecting MWB 8.1–8.7 and IBM InfoSphere Information Server 8.1, 8.5 (pre-FP3), and 8.7. The issue arises in MWB and could allow remote injection of script/HTML via unspecified vectors. Reported ...

CVE-2012-0205

CVE-2012-0205 affects IBM InfoSphere Information Server MWB (Metadata Workbench) versions 8.1–8.7. The root cause is unrestricted access to the troubleshooting feature, enabling remote authenticated users to bypass access restrictions or cause a workbench outage (deny service). Affected products ...