Ibm Infosphere Information Server On Cloud vulnerabilities
29 known vulnerabilities affecting ibm/infosphere_information_server_on_cloud.
Total CVEs
29
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH6MEDIUM20
Vulnerabilities
Page 2 of 2
CVE-2018-1895P4MEDIUMCVSS 5.4v11.5v11.72019-02-15
CVE-2018-1895 [MEDIUM] CWE-79 CVE-2018-1895: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This v
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.
nvd
CVE-2020-4298P4MEDIUMCVSS 5.4v11.5v11.72020-05-19
CVE-2020-4298 [MEDIUM] CWE-79 CVE-2020-4298: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This v
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176475.
nvd
CVE-2020-4384P4MEDIUMCVSS 5.4v11.5v11.72020-05-06
CVE-2020-4384 [MEDIUM] CWE-79 CVE-2020-4384: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This v
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179265.
nvd
CVE-2016-8999P4MEDIUMCVSS 5.4v11.52017-02-01
CVE-2016-8999 [MEDIUM] CWE-79 CVE-2016-8999: IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allo
IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.
nvd
CVE-2019-4220P4MEDIUMCVSS 5.5v11.7.1.02019-06-06
CVE-2019-4220 [MEDIUM] CWE-798 CVE-2019-4220: IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be u
IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.
nvd
CVE-2018-1518P4MEDIUMCVSS 5.5v11.72018-10-18
CVE-2018-1518 [MEDIUM] CWE-326 CVE-2018-1518: IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that
IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM X-Force ID: 141682.
nvd
CVE-2018-1899P4MEDIUMCVSS 4.3v11.5v11.72019-03-05
CVE-2018-1899 [MEDIUM] CVE-2018-1899: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.
nvd
CVE-2025-1138P4MEDIUMCVSS 4.3v11.72025-05-15
CVE-2025-1138 [MEDIUM] CWE-548 CVE-2025-1138: IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user
IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.
nvd
CVE-2019-4257P4MEDIUMCVSS 4.3v11.5v11.72019-06-06
CVE-2019-4257 [MEDIUM] CWE-209 CVE-2019-4257: IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerabili
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.
nvd
← Previous2 / 2