12960 matches found
Cross site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504...
CVE-2023-46174 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269506...
CVE-2023-46174
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting (CVE-2023-46174). The Web UI can embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. The issue has a CVSS v3.1 base score of 5.4 (Medium) with network attack vector, low att...
CVE-2023-42022
IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI (CVE-2023-42022). The issue allows an attacker to inject arbitrary JavaScript within a trusted session, potentially leading to credential disclosure. The public advisory notes affected p...
CVE-2023-43021 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167...
CVE-2023-43021 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167...
CVE-2023-43021
CVE-2023-43021 affects IBM InfoSphere Information Server 11.7. The root issue is that detailed technical error messages returned in the browser disclose sensitive information, enabling information disclosure as described by IBM X-Force ID 266167. Affected product: InfoSphere Information Server 11...
CVE-2023-42009 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504...
CVE-2023-42009
IBM InfoSphere Information Server 11.7 is affected by CVE-2023-42009: a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is documented with a CVSS v3.1 base...
Cross site request forgery (csrf)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585...
Cross site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064...
CVE-2023-43015
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting in the Web UI. The issue allows an attacker to embed arbitrary JavaScript, potentially altering functionality and exposing credentials within a trusted session. The IBM advisory lists remediation steps: upgrade to InfoSp...
CVE-2023-43015 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064...
CVE-2023-38268 IBM InfoSphere Information Server cross-site request forgery
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585...
CVE-2023-38268
The CVE-2023-38268 entry affects IBM InfoSphere Information Server 11.7. The vulnerability is a Cross-Site Request Forgery (CSRF) issue in the web interface that could allow an attacker to perform unauthorized actions on behalf of a trusted user. Affected product: InfoSphere Information Server 11...
CVE-2023-26024 IBM Planning Analytics on Cloud Pak for Data information disclosure
IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...
CVE-2023-42006
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266...
Design/Logic Flaw
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266...
CVE-2023-42006
CVE-2023-42006 affects IBM Administration Runtime Expert for i (versions 7.2–7.5). The root cause is improper authority checks that could allow a local user to obtain sensitive information stored in files (e.g., passwords). The IBM bulletin lists affected releases 7.2–7.5 and provides a remediati...