CVE-2017-1431

IBM InfoSphere Streams (versions 4.0–4.2) is vulnerable to cross-site scripting in the Web UI, allowing an attacker to execute arbitrary JavaScript in a trusted session and potentially disclose credentials. Affected: 4.0.x, 4.1.x, 4.2.x (up to 4.2.1.1 and earlier). CVSSv3 base score 5.4 (MEDIUM);...

CVE-2017-1713

IBM InfoSphere Streams 4.2.1 is affected by CVE-2017-1713 due to use of weaker-than-expected cryptographic algorithms/weak ciphers when TLS is enabled. This could allow an attacker to decrypt highly sensitive information. The IBM bulletin for this CVE specifies affected product/version: IBM Strea...

CVE-2016-2867

IBM InfoSphere Streams (versions 4.0.1.1 and earlier; 4.1.1.0 and earlier) are affected by CVE-2016-2867 due to improper handling of the runAsUser feature, which can cause operator code to check permissions against the root group, enabling local privilege elevation. The IBM Security Bulletin conf...