Vulnerabilities

TI-2016-07372 CVE-2016-9000 · GHSA-6f3w-94mp-xmw9

Cross-site scripting in IBM InfoSphere Information Server

LOW 30

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01146 Published 2017-02-01 No fix listed CWE-79

TI-2016-07371 CVE-2016-8999 · GHSA-2r9p-x5v3-jc5q

Cross-site scripting in IBM InfoSphere Information Server

LOW 26

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2017-02-01 No fix listed CWE-79

TI-2016-07367 CVE-2016-8982 · GHSA-86gw-59mw-3ww4

Information disclosure in IBM InfoSphere DataStage

LOW 27

IBM InfoSphere Information Server stores sensitive information in URL parameters.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01265 Published 2017-02-01 No fix listed CWE-200

TI-2016-05213 CVE-2016-6059 · GHSA-fjjf-46hr-qcp6

XML external entity injection in IBM InfoSphere Information Server

LOW 38

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01523 Published 2017-02-01 No fix listed CWE-611

TI-2015-01707 CVE-2015-1900 · GHSA-x457-r5w2-x62w

IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows…

LOW 32

IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0036 Published 2015-06-29 No fix listed CWE-264

TI-2012-00646 CVE-2012-0701 · GHSA-f5p9-vc4w-mc6r

The client applications in the DataStage Administrator client in InfoSphere DataStage in…

LOW 31

The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticate…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01066 Published 2013-01-31 No fix listed CWE-264

TI-2011-02755 CVE-2011-3124 · GHSA-pp53-g8rh-p72w

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM…

LOW 32

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to g…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00364 Published 2011-08-10 No fix listed CWE-264

TI-2011-02754 CVE-2011-3123 · GHSA-743q-mf5x-cq5m

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM…

LOW 32

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain p…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00364 Published 2011-08-10 No fix listed CWE-264

Vulnerabilities

Filters