Product:

Infosphere_information_server

(Ibm)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 148
Date Id Summary Products Score Patch Annotated
2017-08-02 CVE-2017-1495 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693. Infosphere_information_server 4.9
2017-08-14 CVE-2017-1469 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468. Infosphere_information_server 7.8
2017-08-02 CVE-2017-1383 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155. Infosphere_information_server 9.1
2017-02-01 CVE-2016-8999 IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS. Infosphere_datastage, Infosphere_information_server, Infosphere_information_server_on_cloud 5.4
2017-02-01 CVE-2016-6059 IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Infosphere_datastage, Infosphere_information_server, Infosphere_information_server_on_cloud 8.1
2017-02-01 CVE-2016-5994 IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents. Infosphere_information_server 6.5
2017-02-01 CVE-2016-5984 IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks. Infosphere_information_server, Infosphere_information_server_on_cloud 6.1
2018-03-12 CVE-2016-0250 XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510. Infosphere_information_server 5.4
2017-02-08 CVE-2015-7493 IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information. Infosphere_information_server 4.7
2016-03-03 CVE-2015-7490 IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie. Infosphere_information_server 3.1