Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm infosphere biginsights 2.0.0.0 vulnerabilities and exploits
(subscribe to this query)
2.9
CVSSv2
CVE-2014-0905
IBM InfoSphere BigInsights 2.0 up to and including 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an http session.
Ibm Infosphere Biginsights 2.1.2.0
Ibm Infosphere Biginsights 2.0.0.0
Ibm Infosphere Biginsights 2.1.0.0
Ibm Infosphere Biginsights 2.1.1.0
6
CVSSv2
CVE-2013-3992
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 up to and including 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Ibm Infosphere Biginsights 2.1.0.0
Ibm Infosphere Biginsights 2.0.0.0
3.5
CVSSv2
CVE-2013-3995
Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 up to and including 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Infosphere Biginsights 1.1.0.2
Ibm Infosphere Biginsights 1.2.0.0
Ibm Infosphere Biginsights 1.3.0.0
Ibm Infosphere Biginsights 1.3.0.1
Ibm Infosphere Biginsights 1.4.0.0
Ibm Infosphere Biginsights 2.0.0.0
Ibm Infosphere Biginsights 1.1.0.0
Ibm Infosphere Biginsights 1.1.0.1
Ibm Infosphere Biginsights 2.1.0.0
4.9
CVSSv2
CVE-2013-3996
IBM InfoSphere BigInsights 1.1 up to and including 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.
Ibm Infosphere Biginsights 1.1.0.1
Ibm Infosphere Biginsights 1.1.0.2
Ibm Infosphere Biginsights 1.2.0.0
Ibm Infosphere Biginsights 1.3.0.0
Ibm Infosphere Biginsights 1.3.0.1
Ibm Infosphere Biginsights 1.4.0.0
Ibm Infosphere Biginsights 1.1.0.0
Ibm Infosphere Biginsights 2.0.0.0
Ibm Infosphere Biginsights 2.1.0.0
3.5
CVSSv2
CVE-2013-3993
IBM InfoSphere BigInsights prior to 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Ibm Infosphere Biginsights 1.2.0.0
Ibm Infosphere Biginsights 1.3.0.0
Ibm Infosphere Biginsights 1.1.0.0
Ibm Infosphere Biginsights 2.0.0.0
Ibm Infosphere Biginsights 2.1.0.0
Ibm Infosphere Biginsights 1.3.0.1
Ibm Infosphere Biginsights 1.4.0.0
Ibm Infosphere Biginsights 1.1.0.1
Ibm Infosphere Biginsights 1.1.0.2
Ibm Infosphere Biginsights 2.1.0.1
Ibm Infosphere Biginsights
4.9
CVSSv2
CVE-2013-3997
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x prior to 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Ibm Infosphere Biginsights 1.3.0.0
Ibm Infosphere Biginsights 1.3.0.1
Ibm Infosphere Biginsights 2.1.0.1
Ibm Infosphere Biginsights 1.4.0.0
Ibm Infosphere Biginsights 2.0.0.0
Ibm Infosphere Biginsights 1.1.0.2
Ibm Infosphere Biginsights 1.2.0.0
Ibm Infosphere Biginsights 1.1.0.0
Ibm Infosphere Biginsights 1.1.0.1
Ibm Infosphere Biginsights 2.1.0.0
3.5
CVSSv2
CVE-2013-3998
CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x prior to 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Ibm Infosphere Biginsights 1.1.0.1
Ibm Infosphere Biginsights 1.1.0.2
Ibm Infosphere Biginsights 1.2.0.0
Ibm Infosphere Biginsights 1.3.0.0
Ibm Infosphere Biginsights 2.1.0.1
Ibm Infosphere Biginsights 1.1.0.0
Ibm Infosphere Biginsights 2.1.0.0
Ibm Infosphere Biginsights 1.3.0.1
Ibm Infosphere Biginsights 1.4.0.0
Ibm Infosphere Biginsights 2.0.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000
CVE-2024-4439
unauthorized
CVE-2024-0042
CVE-2024-31848
CVE-2023-40694
cache poisoning
CVE-2024-23707
firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started