IBM Infosphere Information Server 11.7.1

CPE Details

IBM Infosphere Information Server 11.7.1
ibm
infosphere_information_server
11.7.1
2019-06-06
01h31 +00:00
2021-06-07
14h05 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:infosphere_information_server:11.7.1:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

infosphere_information_server

Version

11.7.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-46174 2023-12-01 21h03 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269506.
5.4
Medium
CVE-2023-42019 2023-12-01 21h01 +00:00 IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
5.9
Medium
CVE-2023-40699 2023-12-01 20h59 +00:00 IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
7.5
High
CVE-2023-42022 2023-12-01 20h57 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265938.
5.4
Medium
CVE-2023-43021 2023-12-01 20h55 +00:00 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167.
5.3
Medium
CVE-2023-42009 2023-12-01 20h52 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504.
5.4
Medium
CVE-2023-43015 2023-12-01 19h39 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.
5.4
Medium
CVE-2023-38268 2023-12-01 19h21 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585.
8.8
High
CVE-2023-24959 2023-08-28 00h56 +00:00 IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.
7.5
High
CVE-2023-23473 2023-08-28 00h52 +00:00 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 245400.
8.8
High
CVE-2023-22877 2023-08-28 00h34 +00:00 IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368.
8.8
High
CVE-2022-41733 2023-01-20 18h34 +00:00 IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted. IBM X-Force ID: 237583.
5.3
Medium
CVE-2020-4305 2020-07-09 19h05 +00:00 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.
8.8
High
CVE-2019-4185 2019-06-06 00h35 +00:00 IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975.
8.3
High