CVE-2018-1845

CVE-2018-1845 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7. The issue is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource exhaustion. Public-connected sources (IBM securit...

CVE-2014-0933

The CVE-2014-0933 entry concerns a CSRF vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 that allows remote attackers to hijack the authentication of arbitrary users. The vulnerability affects the product as described in the NVD entry, which lists Cross-site r...