Show filters
99 Total Results
Displaying 31-40 of 99
Sort by:
Attacker Value
Unknown
CVE-2022-47984
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.
0
Attacker Value
Unknown
CVE-2023-30441
Disclosure Date: April 29, 2023 (last updated October 08, 2023)
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
0
Attacker Value
Unknown
CVE-2023-25928
Disclosure Date: February 21, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646.
0
Attacker Value
Unknown
CVE-2023-24960
Disclosure Date: February 17, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333
0
Attacker Value
Unknown
CVE-2023-24964
Disclosure Date: February 17, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463.
0
Attacker Value
Unknown
CVE-2023-23475
Disclosure Date: February 08, 2023 (last updated November 08, 2023)
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423.
0
Attacker Value
Unknown
CVE-2022-47983
Disclosure Date: February 01, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161.
0
Attacker Value
Unknown
CVE-2022-40752
Disclosure Date: November 16, 2022 (last updated October 24, 2023)
IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.
0
Attacker Value
Unknown
CVE-2022-40753
Disclosure Date: November 15, 2022 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688.
0
Attacker Value
Unknown
CVE-2022-40747
Disclosure Date: November 03, 2022 (last updated December 22, 2024)
"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."
0
