Show filters
432 Total Results
Displaying 51-60 of 432
Sort by:
Attacker Value
Unknown
CVE-2023-22877
Disclosure Date: August 28, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368.
0
Attacker Value
Unknown
CVE-2023-35898
Disclosure Date: July 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.
0
Attacker Value
Unknown
CVE-2023-33857
Disclosure Date: July 17, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.
0
Attacker Value
Unknown
CVE-2023-32336
Disclosure Date: May 22, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID: 255285.
0
Attacker Value
Unknown
CVE-2023-28529
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251213.
0
Attacker Value
Unknown
CVE-2023-22878
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.
0
Attacker Value
Unknown
CVE-2022-47984
Disclosure Date: May 19, 2023 (last updated October 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.
0
Attacker Value
Unknown
CVE-2023-30441
Disclosure Date: April 29, 2023 (last updated October 08, 2023)
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
0
Attacker Value
Unknown
CVE-2023-25928
Disclosure Date: February 21, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646.
0
Attacker Value
Unknown
CVE-2023-24960
Disclosure Date: February 17, 2023 (last updated November 08, 2023)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333
0
