Show filters
99 Total Results
Displaying 21-30 of 99
Sort by:
Attacker Value
Unknown
CVE-2024-22352
Disclosure Date: March 21, 2024 (last updated April 02, 2024)
IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 280361.
0
Attacker Value
Unknown
CVE-2023-50303
Disclosure Date: February 28, 2024 (last updated December 21, 2024)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273333.
0
Attacker Value
Unknown
CVE-2023-50955
Disclosure Date: February 21, 2024 (last updated December 21, 2024)
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.
0
Attacker Value
Unknown
CVE-2023-33843
Disclosure Date: February 21, 2024 (last updated December 21, 2024)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544.
0
Attacker Value
Unknown
CVE-2023-40363
Disclosure Date: November 18, 2023 (last updated November 30, 2023)
IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332.
0
Attacker Value
Unknown
CVE-2023-35898
Disclosure Date: July 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.
0
Attacker Value
Unknown
CVE-2023-33857
Disclosure Date: July 17, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.
0
Attacker Value
Unknown
CVE-2023-32336
Disclosure Date: May 22, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID: 255285.
0
Attacker Value
Unknown
CVE-2023-28529
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251213.
0
Attacker Value
Unknown
CVE-2023-22878
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.
0
