Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

infosphere information server on cloud vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2020-4305
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote malicious user to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulner...
Ibm Infosphere Information Server 11.3.0Ibm Infosphere Information Server 11.5.0Ibm Infosphere Information ServerIbm Infosphere Information Server On Cloud 11.5.0.0Ibm Infosphere Information Server On Cloud
4.3
CVSSv2
CVE-2020-4286
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176268.
Ibm Infosphere Information Server 11.3Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7
3.5
CVSSv2
CVE-2020-4298
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted s...
Ibm Infosphere Information Server 11.3Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7
3.5
CVSSv2
CVE-2020-4384
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted s...
Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7Ibm Infosphere Qualitystage 11.3Ibm Infosphere Qualitystage 11.5Ibm Infosphere Qualitystage 11.7
3.5
CVSSv2
CVE-2019-4237
A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an malicious user to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
Ibm Infosphere Information Server 11.3Ibm Infosphere Information Server 11.5Ibm Infosphere Information Server 11.7Ibm Infosphere Information Governance Catalog 11.3Ibm Infosphere Information Governance Catalog 11.5Ibm Infosphere Information Governance Catalog 11.7Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7
4
CVSSv2
CVE-2019-4257
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.
Ibm Infosphere Information Governance Catalog 11.5Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7Ibm Infosphere Information Governance Catalog 11.7Ibm Infosphere Information Analyzer 11.7Ibm Infosphere Information Analyzer 11.5
5.4
CVSSv2
CVE-2019-4185
IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975.
Ibm Infosphere Information Server 11.7.1Ibm Infosphere Information Server On Cloud 11.7.1
2.1
CVSSv2
CVE-2019-4220
IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.
Ibm Watson Knowledge Catalog 11.7.1.0Ibm Infosphere Information Server On Cloud 11.7.1.0
3.5
CVSSv2
CVE-2019-4238
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted s...
Ibm Infosphere Information Server 11.3Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server 11.5Ibm Infosphere Information Server 11.7Ibm Infosphere Information Server On Cloud 11.7
7.5
CVSSv2
CVE-2018-1994
IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494.
Ibm Infosphere Information Server On Cloud 11.5Ibm Infosphere Information Server On Cloud 11.7Ibm Infosphere Metadata Asset Manager 11.7Ibm Infosphere Metadata Asset Manager 11.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook