Lucene search

K
IbmInfosphere Information Server

13 matches found

CVE
CVE
added 2020/07/09 7:15 p.m.49 views

CVE-2020-4305

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitr...

9.3CVSS8.8AI score0.01393EPSS
CVE
CVE
added 2020/09/25 5:15 p.m.41 views

CVE-2020-4727

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against...

6.1CVSS6.2AI score0.00181EPSS
CVE
CVE
added 2020/02/05 4:15 p.m.40 views

CVE-2013-0507

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability

8.1CVSS7.8AI score0.00232EPSS
CVE
CVE
added 2020/05/19 2:15 p.m.40 views

CVE-2020-4298

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS5.2AI score0.00179EPSS
CVE
CVE
added 2020/04/16 4:15 p.m.36 views

CVE-2020-4347

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.

7.5CVSS7.2AI score0.00163EPSS
CVE
CVE
added 2020/05/19 2:15 p.m.35 views

CVE-2020-4286

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176268.

6.5CVSS6.4AI score0.0009EPSS
CVE
CVE
added 2020/05/06 2:15 p.m.35 views

CVE-2020-4384

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS5.2AI score0.00179EPSS
CVE
CVE
added 2020/10/12 2:15 p.m.34 views

CVE-2020-4740

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150.

5.2CVSS5.5AI score0.00103EPSS
CVE
CVE
added 2020/11/13 3:15 p.m.33 views

CVE-2020-4886

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.

4CVSS3.6AI score0.00048EPSS
CVE
CVE
added 2020/03/10 12:15 p.m.32 views

CVE-2020-4162

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 17...

5.4CVSS5.2AI score0.00314EPSS
CVE
CVE
added 2020/09/04 2:15 p.m.32 views

CVE-2020-4632

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.

6.5CVSS6.1AI score0.00123EPSS
CVE
CVE
added 2020/09/04 2:15 p.m.30 views

CVE-2020-4702

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1871...

6.4CVSS5.3AI score0.00223EPSS
CVE
CVE
added 2020/10/12 2:15 p.m.30 views

CVE-2020-4741

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

6.4CVSS5.1AI score0.0017EPSS