cbcvebase.

Ibm Infosphere Information Server vulnerabilities

197 known vulnerabilities affecting ibm/infosphere_information_server.

Total CVEs
197
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL15HIGH42MEDIUM128LOW12

Vulnerabilities

Page 7 of 10
CVE-2020-4741P4MEDIUMCVSS 5.4v11.5v11.72020-10-12
CVE-2020-4741 [MEDIUM] CWE-79 CVE-2020-4741: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This v IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188197.
nvd
CVE-2020-4702P4MEDIUMCVSS 5.4v11.72020-09-04
CVE-2020-4702 [MEDIUM] CWE-79 CVE-2020-4702: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerabil IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187.
nvd
CVE-2020-4298P4MEDIUMCVSS 5.4v11.3v11.5+1 more2020-05-19
CVE-2020-4298 [MEDIUM] CWE-79 CVE-2020-4298: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This v IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176475.
nvd
CVE-2020-4384P4MEDIUMCVSS 5.4v11.3v11.5+1 more2020-05-06
CVE-2020-4384 [MEDIUM] CWE-79 CVE-2020-4384: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This v IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179265.
nvd
CVE-2020-4162P4MEDIUMCVSS 5.4v11.5v11.72020-03-10
CVE-2020-4162 [MEDIUM] CWE-79 CVE-2020-4162: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerab IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174342.
nvd
CVE-2020-4997P4MEDIUMCVSS 5.4v11.72021-04-05
CVE-2020-4997 [MEDIUM] CWE-79 CVE-2020-4997: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192914
nvd
CVE-2021-29771P4MEDIUMCVSS 5.4v11.72021-11-02
CVE-2021-29771 [MEDIUM] CWE-79 CVE-2021-29771: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
nvd
CVE-2023-43021P4MEDIUMCVSS 5.3≥ 11.7.0.0, < 11.7.1.0≥ 11.7.0.0, < 11.7.1.4+1 more2023-12-01
CVE-2023-43021 [MEDIUM] CWE-209 CVE-2023-43021: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive informatio IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167.
nvd
CVE-2021-38952P4MEDIUMCVSS 5.4v11.72022-04-28
CVE-2021-38952 [MEDIUM] CWE-79 CVE-2021-38952: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408.
nvd
CVE-2022-22443P4MEDIUMCVSS 5.4v11.72022-04-28
CVE-2022-22443 [MEDIUM] CWE-79 CVE-2022-22443: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440.
nvd
CVE-2022-22322P4MEDIUMCVSS 5.4v11.72022-04-28
CVE-2022-22322 [MEDIUM] CWE-79 CVE-2022-22322: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370.
nvd
CVE-2022-47983P4MEDIUMCVSS 5.4v11.72023-02-01
CVE-2022-47983 [MEDIUM] CWE-79 CVE-2022-47983: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161.
nvd
CVE-2023-46174P4MEDIUMCVSS 5.4≥ 11.7.0.0, < 11.7.1.0≥ 11.7.0.0, < 11.7.1.4+1 more2023-12-01
CVE-2023-46174 [MEDIUM] CWE-79 CVE-2023-46174: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269506.
nvd
CVE-2023-43015P4MEDIUMCVSS 5.4≥ 11.7.0.0, < 11.7.1.0≥ 11.7.0.0, < 11.7.1.4+1 more2023-12-01
CVE-2023-43015 [MEDIUM] CWE-79 CVE-2023-43015: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.
nvd
CVE-2023-42022P4MEDIUMCVSS 5.4≥ 11.7.0.0, < 11.7.1.0≥ 11.7.0.0, < 11.7.1.4+1 more2023-12-01
CVE-2023-42022 [MEDIUM] CWE-79 CVE-2023-42022: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265938.
nvd
CVE-2023-42009P4MEDIUMCVSS 5.4≥ 11.7.0.0, < 11.7.1.0≥ 11.7.0.0, < 11.7.1.4+1 more2023-12-01
CVE-2023-42009 [MEDIUM] CWE-79 CVE-2023-42009: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504.
nvd
CVE-2022-35642P4MEDIUMCVSS 5.4v11.72022-11-03
CVE-2022-35642 [MEDIUM] CWE-79 CVE-2022-35642: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability al "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592."
nvd
CVE-2025-36258P4MEDIUMCVSS 5.5≥ 11.7.0.0, ≤ 11.7.1.62026-03-25
CVE-2025-36258 [MEDIUM] CWE-256 CVE-2025-36258: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and othe IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user.
nvd
CVE-2023-28529P4MEDIUMCVSS 5.4v11.72023-05-19
CVE-2023-28529 [MEDIUM] CWE-79 CVE-2023-28529: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerabil IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251213.
nvd
CVE-2023-33843P4MEDIUMCVSS 5.4v11.72024-02-21
CVE-2023-33843 [MEDIUM] CWE-79 CVE-2023-33843: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544.
nvd
← Previous7 / 10Next →
Ibm Infosphere Information Server vulnerabilities | cvebase