Infosphere Information Server

infosphere_information_server

Vendor: Ibm • 189 CVEs

CVEs (189)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47984 1Ibm 1Infosphere Information Server Jun 17, 2026 May 19, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-...Show more IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.Show less
CVE-2023-30441 1Ibm 4Infosphere Information Server JavaWebsphere Application Server+1 more Jun 17, 2026 Apr 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVE-2023-25928 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 21, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646.Show less
CVE-2023-24960 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 17, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary f...Show more IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333Show less
CVE-2023-24964 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 17, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463.
CVE-2023-23475 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 8, 2023 N/A· v4 4.6 MEDIUM· v3 N/A· v2 IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423.Show less
CVE-2022-47983 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 1, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161.Show less
CVE-2022-41733 1Ibm 1Infosphere Information Server Jun 17, 2026 Jan 20, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted. IBM X-Force ID: 237583.
CVE-2022-40752 1Ibm 2Infosphere Information Server Infosphere Information Server On Cloud Jun 17, 2026 Nov 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.
CVE-2022-40753 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 15, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688. Show less
CVE-2022-40747 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consu...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."Show less
CVE-2022-40235 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation. IBM X-Force ID: 235725."
CVE-2022-35717 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361.
CVE-2022-35642 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592."Show less
CVE-2022-30615 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592.Show less
CVE-2022-30608 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Forc...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Force ID: 227295.Show less
CVE-2022-22442 1Ibm 2Infosphere Information Server Infosphere Information Server On Cloud Jun 17, 2026 Nov 3, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."
CVE-2022-22425 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 22...Show more "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."Show less
CVE-2022-41291 1Ibm 1Infosphere Information Server Jun 17, 2026 Oct 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699.
CVE-2022-36772 1Ibm 1Infosphere Information Server Jun 17, 2026 Oct 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user.

Previous 1...456...10 Next