CVE-2019-4257

IBM InfoSphere Information Server 11.5 and 11.7 are affected by an information disclosure vulnerability (CVE-2019-4257) in IBM InfoSphere Information Analyzer and InfoSphere Information Governance Catalog on Cloud. The root cause is exposure of sensitive information in error messages, which could...

CVE-2018-1875

CVE-2018-1875 affects IBM InfoSphere Information Governance Catalog (IGC) versions 11.3, 11.5, and 11.7, and IBM InfoSphere Information Server on Cloud (11.5 and 11.7). The vulnerability is an open redirect that could let a remote attacker lure a user to a crafted site to spoof the displayed URL ...

CVE-2019-4237

CVE-2019-4237 affects IBM InfoSphere Information Server (and Information Governance Catalog; on Cloud) versions 11.3, 11.5, and 11.7. It is a Cross-Frame Scripting vulnerability that can allow loading the vulnerable application inside an HTML iframe on a malicious page. Root cause details are not...

CVE-2018-1895

CVE-2018-1895 affects IBM InfoSphere Information Server (and IBM InfoSphere Information Governance Catalog) versions 11.3, 11.5, and 11.7 with a cross-site scripting (XSS) flaw in the Web UI. The IBM bulletin describes it as a Reflected XSS affecting the Web UI, enabling an attacker to inject arb...

CVE-2018-1899

CVE-2018-1899 affects IBM InfoSphere Information Server and IBM InfoSphere Information Governance Catalog (versions 11.3, 11.5, 11.7; also Information Server on Cloud 11.5/11.7). Root cause: improper access control that allows an attacker to modify settings related to InfoSphere Business Glossary...

CVE-2016-0280

CVE-2016-0280 is an XSS vulnerability affecting IBM InfoSphere Information Server Framework, Information Governance Catalog, and Business Glossary across multiple versions (ISF 8.5, IGC 11.3/11.5, BI Glossary 8.7/9.1, Framework 8.7/9.1/11.3/11.5). The root cause is improper validation of user-sup...