CVE-2021-29681 — Sensitive Information Exposure in IBM Infosphere Information Server

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 59.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedMay 21
Latest updateMay 24

Description

IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be used in further attacks against the system. IBM X-Force ID: 199918.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-qxqq-wxh5-j96h: IBM InfoSphere Information Server 11↗2022-05-24
▶
CVEList
CVE-2021-29681: IBM InfoSphere Information Server 11↗2021-05-21
▶
CVE-2021-29681 — Sensitive Information Exposure in IBM | cvebase