CVE-2019-4257

IBM InfoSphere Information Server 11.5 and 11.7 are affected by an information disclosure vulnerability (CVE-2019-4257) in IBM InfoSphere Information Analyzer and InfoSphere Information Governance Catalog on Cloud. The root cause is exposure of sensitive information in error messages, which could...

CVE-2022-22454

Summary (concrete details available) : IBM InfoSphere Information Server 11.7 contains an OS command injection vulnerability (CVE-2022-22454) that could allow a locally authenticated attacker to execute arbitrary commands by sending a specially crafted request. The IBM bulletin lists affected pro...

CVE-2018-1845

CVE-2018-1845 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7. The issue is a XML External Entity Injection (XXE) when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource exhaustion. Public-connected sources (IBM securit...

CVE-2019-4185

CVE-2019-4185 affects IBM InfoSphere Information Server containers running version 11.7.1. The vulnerability stems from an insecurely configured component that enables privilege escalation. IBM’s security bulletin lists the base score as 8.3 (CVSSv3) and confirms the affected product/version. Rem...

CVE-2022-40752

IBM InfoSphere DataStage 11.7 is affected by a command-injection vulnerability due to improper neutralization of special elements (CVE-2022-40752). The issue impacts DataStage components (including Flow Designer) and is rated as high-severity (CVSS v3.1 base score 9.8) with network attack vector ...

CVE-2019-4220

CVE-2019-4220 affects IBM InfoSphere Information Server 11.7.1.0 and IBM Watson Knowledge Catalog (with Information Server) 11.7.1.0. Description: a hard-coded encryption key could be used to decrypt sensitive information. Impact: potential exposure of data due to improper cryptography. Remediati...

CVE-2025-1499

Summary : CVE-2025-1499 affects IBM InfoSphere Information Server 11.7. The root cause is the explicit storage of credential information for database authentication in a cleartext parameter file, which can be viewed by an authenticated user, leading to potential information disclosure. The issue ...

CVE-2016-9000

IBM InfoSphere DataStage is affected by CVE-2016-9000, a Cross‑Frame Scripting issue caused by insufficient HTML iframe protection. A remote attacker could entice a user to visit a crafted URL to load a page under the attacker’s control, enabling clickjacking or other client‑side browser attacks....

CVE-2018-1875

CVE-2018-1875 affects IBM InfoSphere Information Governance Catalog (IGC) versions 11.3, 11.5, and 11.7, and IBM InfoSphere Information Server on Cloud (11.5 and 11.7). The vulnerability is an open redirect that could let a remote attacker lure a user to a crafted site to spoof the displayed URL ...

CVE-2022-22442

CVE-2022-22442 affects IBM InfoSphere Information Server 11.7. The issue is an access control error that could allow an authenticated user to access information restricted to elevated-privilege users, per multiple sources. The root cause is improper access controls leading to an information‑discl...

CVE-2020-4305

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2020-4305, a remote code execution via deserialization of untrusted data. An attacker could coax a user to visit a specially crafted web site to trigger arbitrary code execution. The IBM security bulletin notes no...

CVE-2019-4237

CVE-2019-4237 affects IBM InfoSphere Information Server (and Information Governance Catalog; on Cloud) versions 11.3, 11.5, and 11.7. It is a Cross-Frame Scripting vulnerability that can allow loading the vulnerable application inside an HTML iframe on a malicious page. Root cause details are not...

CVE-2024-40689

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker can send crafted SQL statements to view, add, modify, or delete data in the back-end database. Affected product: InfoSphere Information Server (11.7). Root cause: SQL injection vulnerability; exploitation det...

CVE-2016-6059

CVE-2016-6059 affects IBM InfoSphere Information Server and related components. The vulnerability arises from an XML External Entity Injection (XXE) during XML data processing, enabling a remote attacker to cause denial of service and potentially expose sensitive data or exhaust memory. Affected ...

CVE-2016-8999

CVE-2016-8999 affects IBM InfoSphere Information Server and related components (InfoSphere DataStage; InfoSphere Information Server on Cloud). The vulnerability is a path-relative stylesheet import issue that can cause a page to render in quirks mode, enabling an attacker to inject malicious CSS....

CVE-2018-1917

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2018-1917, an information-disclosure flaw that could allow an authenticated user to access JSP files and disclose sensitive information. IBM’s security bulletin provides remediation by upgrading to 11.7.1.0 (and r...

CVE-2018-1701

CVE-2018-1701 affects IBM InfoSphere Information Server 11.7. An authenticated/local user under special conditions could expose sensitive information during installation (per IBM bulletin). No explicit remote code execution is described in the provided documents. Remediation: update to the latest...

CVE-2018-1518

CVE-2018-1518 affects IBM InfoSphere Information Server 11.7. The issue is a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM lists CVSS Base Score 6.2, with a local attack vector and low complexity. Affected products include IBM Inf...

CVE-2020-4298

The CVE-2020-4298 issue affects IBM InfoSphere Information Server (11.3, 11.5, 11.7). It is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. The IBM Security Bulletin confirms ...

CVE-2018-1906

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2018-1906, an Improper Authentication vulnerability that could allow an authenticated user to download code via a specially crafted HTTP request. According to IBM’s advisory, affected products include InfoSphere I...

CVE-2017-1321

IBM InfoSphere Information Server (Framework) and InfoSphere Information Server on Cloud are affected by CVE-2017-1321 (XSS). The vulnerability arises from improper validation of user-supplied input, allowing remote attackers to embed arbitrary JavaScript in the Web UI, potentially leading to cre...

CVE-2018-1994

CVE-2018-1994 affects IBM InfoSphere Metadata Asset Manager and InfoSphere Information Server on Cloud (ported to versions 11.5 and 11.7). The vulnerability is SQL injection in the Oracle/SQL-side handling that could allow a remote attacker to view, add, modify, or delete data in the back-end dat...

CVE-2016-5984

CVE-2016-5984 affects IBM InfoSphere Information Server and ISF/InfoSphere on Cloud. The vulnerability is a cross-frame scripting issue due to insufficient HTML iframe protection, enabling a remote attacker to use a crafted URL to perform clickjacking or similar client-side browser attacks. Affec...

CVE-2018-1895

CVE-2018-1895 affects IBM InfoSphere Information Server (and IBM InfoSphere Information Governance Catalog) versions 11.3, 11.5, and 11.7 with a cross-site scripting (XSS) flaw in the Web UI. The IBM bulletin describes it as a Reflected XSS affecting the Web UI, enabling an attacker to inject arb...

CVE-2025-1138

CVE-2025-1138 affects IBM InfoSphere Information Server 11.7. An Information Disclosure vulnerability allows an authenticated user to obtain sensitive information via a directory listing, enabling potential follow-on attacks. The issue is addressed in IBM’s Security Bulletin for CVE-2025-1138, wh...

CVE-2020-4286

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by a cross-site request forgery (CSRF) vulnerability (CVE-2020-4286). The IBM bulletin notes that an attacker could leverage CSRF to perform unauthorized actions on behalf of a trusted user. Remediation: upgrade to 11.7....

CVE-2019-4238

CVE-2019-4238 affects IBM InfoSphere Information Server and related components. Listed vulnerable products include IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7, with a cross-site scripting vulnerability that can cause arbitrary JavaScript execution in the Web UI and potential c...

CVE-2020-4384

CVE-2020-4384 affects IBM InfoSphere Information Server (and InfoSphere QualityStage) on versions 11.3, 11.5, and 11.7 with a cross-site scripting (XSS) vulnerability in the Web UI that can allow arbitrary JavaScript execution and potential credential disclosure within a trusted session. IBM’s se...

CVE-2018-1899

CVE-2018-1899 affects IBM InfoSphere Information Server and IBM InfoSphere Information Governance Catalog (versions 11.3, 11.5, 11.7; also Information Server on Cloud 11.5/11.7). Root cause: improper access control that allows an attacker to modify settings related to InfoSphere Business Glossary...