Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2023-42009)

Summary A cross-site scripting vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-42009 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2023-43015)

Summary A cross-site scripting vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-43015 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Security

Summary Multiple vulnerabilities in VMware Tanzu Spring Security used by IBM InfoSphere Information Server were addressed. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-34034 DESCRIPTION: VMware Tanzu Spring Security could allow a...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2023-46174)

Summary A cross-site scripting vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-46174 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

CVE-2023-40363

IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332...

PT-2023-27413 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an authenticated user to change installation files due to incorrect file permission settings. Recommendations: For IBM InfoSphere Information Server version 11.7,...

Security Bulletin: InfoSphere Information Server is vulnerable due to improper access control (CVE-2023-40363)

Summary An improper access control vulnerablity in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-40363 DESCRIPTION: InfoSphere Information Server could allow an authenticated user to change installation files due to incorrect file permission settings. CVSS Base...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2023-91223)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server version...

IBM InfoSphere Information Server 跨站请求伪造漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server version...

PT-2023-25370 · Ibm · Ibm Infosphere Information Server +1

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to an insecure security configuration in InfoSphere Data Flow Designer, which could allow an authenticated user to obtain sensitive information. Recommendations:...

Security Bulletin: IBM InfoSphere Information Server is affected but not vulnerable to a vulnerability in jose.4j

Summary An information disclosure vulnerability in jose.4j used by InfoSphere Information Server was addressed. Vulnerability Details IBM X-Force ID: 254437 DESCRIPTION: jose.4.j could allow a remote attacker to obtain sensitive information, caused by a chosen ciphertext attack in RSA15. By utili...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Apache Commons FileUpload and Tomcat (CVE-2023-24998)

Summary A denial of service vulnerability in Apache Commons FileUpload and Tomcat affects WebSphere Liberty that is used by IBM InfoSphere Information Server. The vulnerability was addressed. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerab...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-41891)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

IBM InfoSphere Information Server Code Execution Vulnerability

IBM InfoSphere Information Server is a leading integration platform with service offerings that help you understand, cleanse, monitor, transform and deliver data. A code execution vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be exploited by an attacker to...

PT-2023-18746 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM InfoSphere Information Server version 11.7, update the software to a versi...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

PT-2023-21779 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Oracle products ( CVE-2020-2934, CVE-2022-21363)

Summary Multiple vulnerabilities in Oracle products used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2020-2934 DESCRIPTION: An unspecified vulnerability in multiple Oracle products could allow an unauthenticated attacker to cause low confidentiality impact, lo...

Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Google Guava (CVE-2018-10237, CVE-2020-8908)

Summary Multiple vulnerabilities in Google Guava used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArray and CompoundOrderin...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js (CVE-2022-0235,CVE-2020-15168)

Summary Multiple vulnerabilities in Node.js used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-0235 DESCRIPTION: Node.js node-fetch could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when fetching a remote url with...