Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
IbmInfosphere Information Server9.1

30 matches found

CVE
CVE•added 2017/08/02 5:29 p.m.•54 views

CVE-2017-1467

A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466.

8.1CVSS7.9AI score0.00558EPSS
CVE
CVE•added 2017/08/02 5:29 p.m.•49 views

CVE-2017-1383

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.

9.1CVSS8.8AI score0.00575EPSS
CVE
CVE•added 2017/08/02 5:29 p.m.•47 views

CVE-2017-1495

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.

4.9CVSS4.9AI score0.00258EPSS
CVE
CVE•added 2018/06/05 3:29 p.m.•46 views

CVE-2017-1350

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526.

8.4CVSS7.5AI score0.0007EPSS
CVE
CVE•added 2018/06/05 3:29 p.m.•46 views

CVE-2018-1432

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking atta...

6.1CVSS6AI score0.00086EPSS
CVE
CVE•added 2014/03/16 2:6 p.m.•45 views

CVE-2013-4058

Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.

6.5CVSS8.1AI score0.00501EPSS
CVE
CVE•added 2013/01/31 12:6 p.m.•42 views

CVE-2012-0705

InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not validate unspecified input data, which allows remote authenticated users to execute arbitrary commands via unknown vectors.

7.1CVSS7.2AI score0.00543EPSS
CVE
CVE•added 2013/08/16 1:55 a.m.•42 views

CVE-2013-3034

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.

3.5CVSS5.2AI score0.00188EPSS
CVE
CVE•added 2017/02/01 10:59 p.m.•42 views

CVE-2016-8999

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

5.4CVSS5.2AI score0.00269EPSS
CVE
CVE•added 2013/01/31 12:6 p.m.•41 views

CVE-2012-0204

Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current wor...

9.3CVSS6.5AI score0.00658EPSS
CVE
CVE•added 2013/10/02 10:55 p.m.•41 views

CVE-2013-4066

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.

4.3CVSS6.7AI score0.00227EPSS
CVE
CVE•added 2017/08/02 5:29 p.m.•41 views

CVE-2017-1468

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.

7.8CVSS7.5AI score0.00061EPSS
CVE
CVE•added 2019/02/15 8:29 p.m.•40 views

CVE-2018-1727

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.

9.1CVSS8.8AI score0.00416EPSS
CVE
CVE•added 2020/02/05 4:15 p.m.•39 views

CVE-2013-0507

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability

8.1CVSS7.8AI score0.00232EPSS
CVE
CVE•added 2014/03/16 2:6 p.m.•39 views

CVE-2013-4057

Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.

6.8CVSS7.2AI score0.00211EPSS
CVE
CVE•added 2017/08/14 10:29 p.m.•39 views

CVE-2017-1469

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468.

7.8CVSS7.4AI score0.00099EPSS
CVE
CVE•added 2016/03/03 10:59 p.m.•38 views

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.

3.5CVSS4.8AI score0.00128EPSS
CVE
CVE•added 2017/07/12 5:29 p.m.•38 views

CVE-2017-1321

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ...

6.1CVSS5.8AI score0.00282EPSS
CVE
CVE•added 2013/04/01 7:55 p.m.•36 views

CVE-2013-0502

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.

4.3CVSS5.7AI score0.00266EPSS
CVE
CVE•added 2013/08/16 1:55 a.m.•36 views

CVE-2013-3040

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

5CVSS6.8AI score0.00254EPSS
CVE
CVE•added 2014/03/16 2:6 p.m.•36 views

CVE-2013-4059

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.

4.3CVSS5.7AI score0.00427EPSS
CVE
CVE•added 2015/06/28 2:59 p.m.•36 views

CVE-2015-1901

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.

1.9CVSS5.7AI score0.00055EPSS
CVE
CVE•added 2013/12/18 4:4 p.m.•35 views

CVE-2013-5440

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation.

2.1CVSS5.7AI score0.00054EPSS
CVE
CVE•added 2015/05/25 2:59 p.m.•35 views

CVE-2015-0180

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors.

5.5CVSS6.1AI score0.00135EPSS
CVE
CVE•added 2013/03/20 2:55 p.m.•34 views

CVE-2012-5938

The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.

7.2CVSS6.4AI score0.00036EPSS
CVE
CVE•added 2013/08/16 1:55 a.m.•33 views

CVE-2013-0585

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to the (1) web console and (2) repository management user interfaces.

3.5CVSS5.2AI score0.00166EPSS
CVE
CVE•added 2013/10/02 10:55 p.m.•33 views

CVE-2013-4067

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.

5.8CVSS6.6AI score0.00246EPSS
CVE
CVE•added 2017/02/01 8:59 p.m.•32 views

CVE-2016-5984

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to cond...

6.1CVSS6AI score0.00206EPSS
CVE
CVE•added 2013/10/13 10:20 a.m.•30 views

CVE-2013-4056

Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.

6.8CVSS7.2AI score0.00103EPSS
CVE
CVE•added 2017/02/08 10:59 p.m.•29 views

CVE-2015-7493

IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.

4.7CVSS4.8AI score0.00053EPSS