Priority HIGH 76
IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03853 · Published 2021-01-21 · No fix listed CWE-502
Priority MEDIUM 53
IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01924 · Published 2022-11-16 · No fix listed CWE-77
Priority MEDIUM 51
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01304 · Published 2022-11-03 · No fix listed CWE-1236
Priority MEDIUM 50
"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01138 · Published 2022-11-03 · No fix listed CWE-611
Priority MEDIUM 49
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00679 · Published 2023-05-19 · No fix listed CWE-89
Priority MEDIUM 47
Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0205 · Published 2009-12-09 · No fix listed CWE-119
Priority MEDIUM 46
IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.014 · Published 2023-05-22 · No fix listed CWE-502
Priority MEDIUM 45
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01417 · Published 2022-06-06 · No fix listed CWE-89
Priority MEDIUM 45
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04542 · Published 2020-07-09 · No fix listed CWE-502
Priority MEDIUM 44
IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02463 · Published 2019-02-15 · No fix listed CWE-611
Priority MEDIUM 44
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02718 · Published 2017-08-02 · No fix listed CWE-611
Priority MEDIUM 43
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00538 · Published 2024-07-26 · No fix listed CWE-89
Priority MEDIUM 43
IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02037 · Published 2021-11-02 · No fix listed CWE-91
Priority MEDIUM 43
Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0131 · Published 2013-01-31 · No fix listed
Priority MEDIUM 42
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01406 · Published 2023-02-17 · No fix listed CWE-22
Priority MEDIUM 41
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00757 · Published 2025-11-03 · No fix listed CWE-611
Priority MEDIUM 41
IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01078 · Published 2023-12-01 · No fix listed CWE-20
Priority MEDIUM 41
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00664 · Published 2023-08-28 · No fix listed CWE-1236
Priority MEDIUM 40
IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00457 · Published 2025-09-29 · No fix listed CWE-78
Priority MEDIUM 40
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00604 · Published 2023-04-29 · Fixed CWE-327
Priority MEDIUM 40
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00329 · Published 2022-11-03 · No fix listed CWE-352
Priority MEDIUM 40
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00968 · Published 2021-07-09 · No fix listed CWE-89
Priority LOW 39
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-06-21 · No fix listed CWE-770
Priority LOW 39
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0049 · Published 2021-11-02 · No fix listed CWE-352
Priority LOW 39
IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server.
CVSS 3.0HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.01242 · Published 2019-02-15 · No fix listed
Load more