CVE-2023-30441

CVE-2023-30441 affects IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0–8.0.7.11, with potential exposure of sensitive information due to a combination of flaws/configurations. The CVSS base score is 7.5 (HIGH). IBM Bulletins reference remediation by upgrading to newer...

CVE-2023-50303

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue allows an attacker to embed arbitrary JavaScript and could lead to credentials disclosure within a trusted session. The CVE-2023-50303 entry is corroborated by multiple source...

CVE-2023-40363

The CVE-2023-40363 issue affects IBM InfoSphere Information Server 11.7. Affected component: installation file permissions that permit an authenticated user to change installation files, caused by incorrect file permission settings. Impact stated in sources includes the ability to modify installa...

CVE-2021-29730

CVE-2021-29730 : IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection, allowing a remote attacker to view, add, modify or delete data in the back-end database. The IBM Security Bulletin lists affected product 11.7 and remediation/upgrades to 11.7.1.0 (and related Fix Pack/Service...

CVE-2022-22441

Summary: CVE-2022-22441 affects IBM InfoSphere Information Server 11.7. An authenticated user could view information about higher privileged users and groups due to a privilege escalation vulnerability. Impact (as stated): information disclosure of higher-privileged entities; no exploitation deta...

CVE-2024-31898

The CVE-2024-31898 entry concerns IBM InfoSphere Information Server 11.7 where an authenticated user can read or modify sensitive information by bypassing authentication via insecure direct object references. This vulnerability is mapped to a network attack (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L...

CVE-2024-31902

IBM InfoSphere Information Server 11.7 is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2024-31902. Root cause is CSRF allowing execution of malicious, unauthorized actions transmitted from a trusted user. IBM bulletin lists affected version 11.7 and provides remediation: apply InfoSphere I...

CVE-2021-29681

The CVE-2021-29681 entry affects IBM InfoSphere Information Server 11.7, where an information disclosure vulnerability exists due to injection of parameters into an HTML query. The vulnerability could allow an attacker to obtain sensitive information, enabling further attacks on the system. IBM’s...

CVE-2021-29712

The CVE-2021-29712 vulnerability affects IBM InfoSphere Information Server (11.7) and related components (Information Analyzer/UI Web UI). The root cause is a cross-site scripting flaw in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials dis...

CVE-2022-22373

CVE-2022-22373 affects IBM InfoSphere Information Server Pack for SAP Apps and BW Packs (11.7). The vulnerability is an improper validation that may allow creation of directories/files on the server filesystem containing non‑sensitive debugging info (e.g., stack traces). Impact per sources includ...

CVE-2022-35642

CVE-2022-35642 affects IBM InfoSphere Information Server 11.7. The vulnerability is a cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Root cause details indicate a stored XSS issue in the Web UI....

CVE-2023-50955

IBM InfoSphere Information Server 11.7 is affected by CVE-2023-50955, an information-disclosure issue that could allow an authenticated privileged user to obtain the absolute path to the web server installation, aiding further attacks. Affected product/version: InfoSphere Information Server 11.7....

CVE-2024-28794

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting via the Web UI, allowing injection of arbitrary JavaScript and potentially leading to credentials disclosure within a trusted session. Affected product: IBM InfoSphere Information Server 11.7. Root cause: failure ...

CVE-2024-52363

CVE-2024-52363 affects IBM InfoSphere Information Server 11.7. A path-traversal vulnerability allows remote attackers to view arbitrary files by sending URLs with dot-dot sequences ( /../ ). The IBM Security Bulletin and Red Hat entry confirm the issue and specify affected product/version details...

CVE-2025-25046

CVE-2025-25046 affects IBM InfoSphere Information Server (11.7) DataStage Flow Designer, where the Flow Designer can transmit sensitive information via URL or query parameters, exposing it to MITM attackers. The issue is described with CWE-319 (Cleartext Transmission of Sensitive Information). Re...

CVE-2024-40690

CVE-2024-40690 affects IBM InfoSphere Information Server 11.7. The issue is a cross-site scripting vulnerability in the Web UI that allows an authenticated user to embed arbitrary JavaScript, potentially altering functionality and disclosing credentials within a trusted session. The IBM security ...

CVE-2023-25928

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI (CVE-2023-25928). The Red Hat advisory summarizes the issue as an XSS in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within ...

CVE-2018-1845

CVE-2018-1845 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7. The issue is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource exhaustion. Public-connected sources (IBM securit...

CVE-2024-28798

The CVE-2024-28798 entry concerns IBM InfoSphere Information Server 11.7 and describes a stored cross-site scripting vulnerability in the Web UI that can alter functionality and potentially disclose credentials in a trusted session. Affected product/version: IBM InfoSphere Information Server 11.7...

CVE-2022-30615

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue allows an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. Remediation per IBM Security Bulletin: apply updates to versio...

CVE-2023-33857

The CVE-2023-33857 entry affects IBM InfoSphere Information Server 11.7. An information-disclosure vulnerability allows a remote attacker to obtain system information via a specially crafted query, potentially aiding further attacks. The IBM bulletin (VRMF 11.7) lists remediation options: upgrade...

CVE-2022-30608

CVE-2022-30608: IBM InfoSphere Information Server 11.7 is affected by a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, unauthorized actions transmitted from a trusted user. Public sources (IBM bulletin) confirm affected product/version and provi...

CVE-2019-4185

CVE-2019-4185 affects IBM InfoSphere Information Server containers running version 11.7.1. The vulnerability stems from an insecurely configured component that enables privilege escalation. IBM’s security bulletin lists the base score as 8.3 (CVSSv3) and confirms the affected product/version. Rem...

CVE-2022-40752

IBM InfoSphere DataStage 11.7 is affected by a command-injection vulnerability due to improper neutralization of special elements (CVE-2022-40752). The issue impacts DataStage components (including Flow Designer) and is rated as high-severity (CVSS v3.1 base score 9.8) with network attack vector ...

CVE-2024-51477

CVE-2024-51477 affects IBM InfoSphere Information Server 11.7. An authenticated user could disclose sensitive username information due to an observable response discrepancy. IBM’s advisory lists the vulnerability (CWE-203) with a base CVSS v3.1 score of 4.3 and indicates remediation by upgrading ...

CVE-2017-1469

CVE-2017-1469 affects IBM InfoSphere Information Server (versions 9.1, 11.3, 11.5, and 11.7 on supported platforms; 11.5 for InfoSphere Information Server on Cloud). Root cause: local privilege escalation by placing arbitrary files in installation directories, enabling a local attacker to gain el...

CVE-2022-40235

CVE-2022-40235 affects IBM InfoSphere Information Server 11.7. The vulnerability stems from improper input validation and can cause a denial of service by removing the ability to run jobs. According to IBM’s bulletin, affected product is InfoSphere Information Server 11.7 and remediation is to up...

CVE-2023-23472

CVE-2023-23472 affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7). An authenticated user could obtain sensitive information that could aid further attacks. The vulnerability is described in IBM’s bulletin as an information-disclosure issue with a CVSS v3.1 base sc...

CVE-2024-28797

IBM InfoSphere Information Server 11.7 is affected by a stored cross-site scripting (XSS) vulnerability in the Web UI (CVE-2024-28797). The issue allows an attacker to embed arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credential disclosure within a truste...

CVE-2022-35715

IBM InfoSphere Information Server 11.7 is affected by CVE-2022-35715, a remote-information-disclosure vulnerability caused by returning detailed technical error messages in stack traces. The IBM Security Bulletin confirms an Information Disclosure vulnerability with a CVSS v3 base score of 5.3 (v...

CVE-2023-50953

CVE-2023-50953 – IBM InfoSphere Information Server 11.7 is an information-disclosure vulnerability caused by improper error handling. When a detailed technical error message is returned, a remote attacker could obtain sensitive information that could assist in further attacks. Affected product/ve...

CVE-2023-50964

IBM InfoSphere Information Server 11.7 is affected by a cross‑site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credential disclosure in a trusted session. Root cause cited as insufficient protection of the web page structure. IBM rem...

CVE-2024-55895

CVE-2024-55895 affects IBM InfoSphere Information Server 11.7. The issue is information disclosure: a remote attacker could obtain sensitive information via a browser displaying detailed technical error messages. IBM’s security bulletin confirms the root cause as error messages leaking informatio...

CVE-2021-29827

CVE-2021-29827 | IBM InfoSphere Information Server 11.7 suffers a cross-frame scripting (clickjacking) vulnerability. A remote attacker could entice a user to a malicious page to hijack the user’s click actions, potentially enabling further attacks. Affected product/version: InfoSphere Informatio...

CVE-2022-22443

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting via the Web UI, potentially enabling credential disclosure in a trusted session. Root cause involves UI handling that allows arbitrary JavaScript execution. Affected product/version: InfoSphere Information Server (includ...

CVE-2022-40748

Summary: CVE-2022-40748 affects IBM InfoSphere Information Server 11.7 and is a cross-site scripting vulnerability that could allow embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. The public IBM advisory confirms affected produ...

CVE-2023-35022

CVE-2023-35022: IBM InfoSphere Information Server 11.7 contains an insecure authorization flaw that could allow a local user to update projects they are not authorized to access. The issue stems from weaknesses in the authorization mechanism, enabling unauthorized project modification (CVE descri...

CVE-2022-22427

The vulnerability CVE-2022-22427 affects IBM InfoSphere Information Server 11.7. A cross-site scripting flaw in the Web UI could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bulletin lists remediation by upgrading t...

CVE-2022-41291

CVE-2022-41291 affects IBM InfoSphere Information Server 11.7. The issue is a session management flaw: the application does not invalidate a user’s session after logout, enabling an authenticated user to impersonate another user. Affected product/version: InfoSphere Information Server 11.7 (and I...

CVE-2022-47983

The vulnerability CVE-2022-47983 affects IBM InfoSphere Information Server 11.7 where the Web UI is vulnerable to cross-site scripting, allowing attackers to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Root cause: lack of input/output sanitization in the ...

CVE-2023-23475

IBM Infosphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Affected product/version: InfoSphere Information Server 11.7. IBM’s sec...

CVE-2024-40704

The CVE-2024-40704 entry affects IBM InfoSphere Information Server (InfoSphere Information Server 11.7). The vulnerability is an information-disclosure flaw that could allow a privileged user to obtain sensitive information from authentication request headers. The IBM bulletin confirms the affect...

CVE-2025-25045

IBM InfoSphere Information Server 11.7 is affected by CVE-2025-25045, a sensitive information disclosure caused by authenticated users receiving detailed technical error messages in requests. The IBM Security Bulletin confirms the vulnerability and lists affected product/version: InfoSphere Infor...

CVE-2021-38952

IBM InfoSphere Information Server 11.7 is affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue enables an attacker to inject arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Root cause cited in publ...

CVE-2023-40699

IBM InfoSphere Information Server 11.7 is affected by CVE-2023-40699 due to improper input validation, enabling a remote attacker to cause a denial of service. The issue is associated with network access and requires no privileges or user interaction. Per IBM advisory, affected products include I...

CVE-2024-35119

CVE-2024-35119 affects IBM InfoSphere Information Server 11.7. The issue is an information-disclosure vulnerability where a detailed technical error message in a stack trace can leak sensitive information to a remote attacker. Impact is limited to confidentiality (low). IBM notes remediation via ...

CVE-2025-1499

Summary : CVE-2025-1499 affects IBM InfoSphere Information Server 11.7. The root cause is the explicit storage of credential information for database authentication in a cleartext parameter file, which can be viewed by an authenticated user, leading to potential information disclosure. The issue ...

CVE-2022-40747

CVE-2022-40747 affects IBM InfoSphere Information Server 11.7. It is an XML External Entity Injection (XXE) vulnerability when processing XML data, potentially exposing sensitive information or consuming memory resources. Remediation in the connected Red Hat/IBM bulletin indicates upgrading to In...

CVE-2023-32336

IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. Root cause: insecure deserialization in the RMI handler. Impact: remote code execution with high confidentiality, integrity, and availability implications...

CVE-2012-0700

CVE-2012-0700 affects IBM InfoSphere Information Server FastTrack client (InfoSphere Server 8.1, 8.5 before FP3, and 8.7). Root cause: insecure local storage of credentials allowing bypass of access restrictions by local users via unspecified vectors. Exploitation status not detailed in the provi...