Ibm Infosphere Information Server vulnerabilities
197 known vulnerabilities affecting ibm/infosphere_information_server.
Total CVEs
197
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL15HIGH42MEDIUM128LOW12
Vulnerabilities
Page 9 of 10
CVE-2026-2484P4MEDIUMCVSS 4.3≥ 11.7.0.0, ≤ 11.7.1.62026-03-25
CVE-2026-2484 [MEDIUM] CWE-209 CVE-2026-2484: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure v
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages
nvd
CVE-2026-1262P4MEDIUMCVSS 4.3≥ 11.7.0.0, ≤ 11.7.1.62026-03-25
CVE-2026-1262 [MEDIUM] CWE-209 CVE-2026-1262: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.
nvd
CVE-2020-4740P4MEDIUMCVSS 5.2v11.5v11.72020-10-12
CVE-2020-4740 [MEDIUM] CWE-79 CVE-2020-4740: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker c
IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150.
nvd
CVE-2023-23475P4MEDIUMCVSS 4.6v11.72023-02-08
CVE-2023-23475 [MEDIUM] CWE-79 CVE-2023-23475: IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability all
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423.
nvd
CVE-2025-3629P4MEDIUMCVSS 4.3≥ 11.7, ≤ 11.7.1.6≥ 11.7.0.0, ≤ 11.7.1.62025-06-21
CVE-2025-3629 [MEDIUM] CWE-282 CVE-2025-3629: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to d
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6
could allow an authenticated user to delete another user's comments due to improper ownership management.
nvd
CVE-2015-7493P4MEDIUMCVSS 4.7v8.5v8.7+3 more2017-02-08
CVE-2015-7493 [MEDIUM] CWE-200 CVE-2015-7493: IBM InfoSphere Information Server could allow a local user under special circumstances to execute co
IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.
nvd
CVE-2013-4059P4MEDIUMCVSS 4.3v8.5v8.5.0.1+8 more2014-03-16
CVE-2013-4059 [MEDIUM] CWE-79 CVE-2013-4059: Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.
nvd
CVE-2013-4066P4MEDIUMCVSS 4.3v8.0v8.1+6 more2013-10-02
CVE-2013-4066 [MEDIUM] CWE-20 CVE-2013-4066: IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.
nvd
CVE-2014-3071P4MEDIUMCVSS 4.3v11.32014-07-26
CVE-2014-3071 [MEDIUM] CWE-79 CVE-2014-3071: Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information S
Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection.
nvd
CVE-2018-1899P4MEDIUMCVSS 4.3v11.3v11.5+1 more2019-03-05
CVE-2018-1899 [MEDIUM] CVE-2018-1899: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.
nvd
CVE-2025-1138P4MEDIUMCVSS 4.3v11.72025-05-15
CVE-2025-1138 [MEDIUM] CWE-548 CVE-2025-1138: IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user
IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.
nvd
CVE-2025-36422P4MEDIUMCVSS 4.3≥ 11.7.0.0, ≤ 11.7.1.62026-03-25
CVE-2025-36422 [MEDIUM] CWE-352 CVE-2025-36422: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer i
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
nvd
CVE-2012-4819P4MEDIUMCVSS 4.3v8.1v8.5+3 more2013-01-31
CVE-2012-4819 [MEDIUM] CWE-79 CVE-2012-4819: Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere
Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified
nvd
CVE-2024-39751P4MEDIUMCVSS 4.3v11.72024-08-06
CVE-2024-39751 [MEDIUM] CWE-209 CVE-2024-39751: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429
nvd
CVE-2024-40706P4MEDIUMCVSS 4.3v11.72025-01-24
CVE-2024-40706 [MEDIUM] CWE-497 CVE-2024-40706: IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version informa
IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.
nvd
CVE-2023-50953P4MEDIUMCVSS 4.3v11.72024-06-30
CVE-2023-50953 [MEDIUM] CWE-209 CVE-2023-50953: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. IBM X-Force ID: 275775.
nvd
CVE-2024-51460P4MEDIUMCVSS 4.3v11.72024-12-11
CVE-2024-51460 [MEDIUM] CWE-209 CVE-2024-51460: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive informa
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system.
nvd
CVE-2012-0703P4MEDIUMCVSS 5.8v8.1v8.5+3 more2013-01-31
CVE-2012-0703 [MEDIUM] CWE-20 CVE-2012-0703: Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Se
Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
nvd
CVE-2009-4239P4MEDIUMCVSS 4.3v8.12009-12-09
CVE-2009-4239 [MEDIUM] CWE-79 CVE-2009-4239: Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1
Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2013-0502P4MEDIUMCVSS 4.3v8.1v8.5+7 more2013-04-01
CVE-2013-0502 [MEDIUM] CWE-79 CVE-2013-0502: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3,
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.
nvd