Show filters
31 Total Results
Displaying 1-10 of 31
Sort by:
Attacker Value
Unknown
CVE-2012-4818
Disclosure Date: September 29, 2022 (last updated December 22, 2024)
IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.
0
Attacker Value
Unknown
CVE-2020-27583
Disclosure Date: January 26, 2021 (last updated November 08, 2023)
IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
0
Attacker Value
Unknown
CVE-2013-0507
Disclosure Date: February 05, 2020 (last updated November 28, 2024)
IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability
0
Attacker Value
Unknown
CVE-2015-7493
Disclosure Date: February 08, 2017 (last updated November 26, 2024)
IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.
0
Attacker Value
Unknown
CVE-2016-0280
Disclosure Date: August 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2015-7490
Disclosure Date: March 03, 2016 (last updated November 25, 2024)
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.
0
Attacker Value
Unknown
CVE-2015-1901
Disclosure Date: June 28, 2015 (last updated October 05, 2023)
The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.
0
Attacker Value
Unknown
CVE-2015-0180
Disclosure Date: May 25, 2015 (last updated October 05, 2023)
The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-0933
Disclosure Date: May 16, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2013-4059
Disclosure Date: March 16, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.
0
