# IBM InfoSphere Information Server.

Every CVE that names IBM InfoSphere Information Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-50955.md)
  `CVE-2023-50955` · CVE record: IBM InfoSphere Information Server · CVSS 2.4 Low · Not analysed yet · Published 21 Feb 2024 · Tags: Path traversal
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-33843.md)
  `CVE-2023-33843` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-46174.md)
  `CVE-2023-46174` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-42019.md)
  `CVE-2023-42019` · CVE record: IBM InfoSphere Information Server · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Weak cryptography or TLS
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2023-40699.md)
  `CVE-2023-40699` · CVE record: IBM InfoSphere Information Server · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2023 · Tags: CWE-20
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-42022.md)
  `CVE-2023-42022` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-43021.md)
  `CVE-2023-43021` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Information disclosure
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-42009.md)
  `CVE-2023-42009` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-43015.md)
  `CVE-2023-43015` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site request forgery](https://agentprime.io/advisories/CVE-2023-38268.md)
  `CVE-2023-38268` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 1 Dec 2023 · Tags: Cross-site request forgery (CSRF)
- [IBM InfoSphere Information Server privilege escalation](https://agentprime.io/advisories/CVE-2023-40363.md)
  `CVE-2023-40363` · CVE record: IBM InfoSphere Information Server · CVSS 8.1 High · Not analysed yet · Published 18 Nov 2023
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-24959.md)
  `CVE-2023-24959` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2023 · Tags: Information disclosure
- [IBM InfoSphere Information Server cross-site request forgery](https://agentprime.io/advisories/CVE-2023-23473.md)
  `CVE-2023-23473` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2023 · Tags: Cross-site request forgery (CSRF)
- [IBM InfoSphere Information Server CSV injection](https://agentprime.io/advisories/CVE-2023-22877.md)
  `CVE-2023-22877` · CVE record: IBM InfoSphere Information Server · CVSS 7.0 High · Not analysed yet · Published 28 Aug 2023 · Tags: Other injection
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-35898.md)
  `CVE-2023-35898` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2023 · Tags: Information disclosure
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-33857.md)
  `CVE-2023-33857` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 16 Jul 2023 · Tags: Information disclosure
- [IBM InfoSphere Information Server code execution](https://agentprime.io/advisories/CVE-2023-32336.md)
  `CVE-2023-32336` · CVE record: IBM InfoSphere Information Server · CVSS 8.8 High · Not analysed yet · Published 22 May 2023 · Tags: Insecure deserialization
- [IBM InfoSphere Information Server SQL injection](https://agentprime.io/advisories/CVE-2022-47984.md)
  `CVE-2022-47984` · CVE record: IBM InfoSphere Information Server · CVSS 6.3 Medium · Not analysed yet · Published 19 May 2023 · Tags: SQL injection
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-22878.md)
  `CVE-2023-22878` · CVE record: IBM InfoSphere Information Server · CVSS 6.2 Medium · Not analysed yet · Published 19 May 2023
- [IBM InfoSphere Information Server 11.7](https://agentprime.io/advisories/CVE-2023-28529.md)
  `CVE-2023-28529` · CVE record: IBM InfoSphere Information Server · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-25928.md)
  `CVE-2023-25928` · CVE record: IBM InfoSphere Information Server · CVSS 4.6 Medium · Not analysed yet · Published 21 Feb 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-24960.md)
  `CVE-2023-24960` · CVE record: IBM InfoSphere Information Server · CVSS 7.5 High · Not analysed yet · Published 17 Feb 2023 · Tags: Path traversal
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-24964.md)
  `CVE-2023-24964` · CVE record: IBM InfoSphere Information Server · CVSS 6.2 Medium · Not analysed yet · Published 17 Feb 2023 · Tags: Information disclosure
- [IBM Infosphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-23475.md)
  `CVE-2023-23475` · CVE record: IBM Infosphere Information Server · CVSS 4.6 Medium · Not analysed yet · Published 8 Feb 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2022-47983.md)
  `CVE-2022-47983` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2022-41733.md)
  `CVE-2022-41733` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 20 Jan 2023 · Tags: CWE-20
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2022-40753.md)
  `CVE-2022-40753` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: Cross-site scripting (XSS)
- [XML external entity injection in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-40747.md)
  `CVE-2022-40747` · CVE record: IBM InfoSphere Information Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2022 · Tags: XML external entities (XXE)
- [Improper input validation in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-40235.md)
  `CVE-2022-40235` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: CWE-20
- [OS command injection in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-35717.md)
  `CVE-2022-35717` · CVE record: IBM InfoSphere Information Server · CVSS 7.8 High · Not analysed yet · Published 3 Nov 2022 · Tags: Command injection
- [OS command injection in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-35642.md)
  `CVE-2022-35642` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Command injection
- [Cross-site scripting in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-30615.md)
  `CVE-2022-30615` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Cross-site scripting (XSS)
- [Cross-site request forgery in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-30608.md)
  `CVE-2022-30608` · CVE record: IBM InfoSphere Information Server · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2022 · Tags: Cross-site request forgery (CSRF)
- [Improper access control in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-22442.md)
  `CVE-2022-22442` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Broken access control
- [CSV injection in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-22425.md)
  `CVE-2022-22425` · CVE record: IBM InfoSphere Information Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2022 · Tags: Other injection
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 does not invalidate session after logout which…](https://agentprime.io/advisories/CVE-2022-41291.md)
  `CVE-2022-41291` · CVE record: IBM InfoSphere Information Server · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2022
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain…](https://agentprime.io/advisories/CVE-2022-36772.md)
  `CVE-2022-36772` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2022
- [Cross-site scripting in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-40748.md)
  `CVE-2022-40748` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 23 Sept 2022 · Tags: Cross-site scripting (XSS)
- [Information disclosure in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-35715.md)
  `CVE-2022-35715` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2022 · Tags: Information disclosure
- [IBM InfoSphere Information Server: An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for…](https://agentprime.io/advisories/CVE-2022-22373.md)
  `CVE-2022-22373` · CVE record: IBM InfoSphere Information Server · CVSS 4.6 Medium · Not analysed yet · Published 1 Jul 2022
- [IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2022-31768.md)
  `CVE-2022-31768` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2022
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to…](https://agentprime.io/advisories/CVE-2022-22454.md)
  `CVE-2022-22454` · CVE record: IBM InfoSphere Information Server · CVSS 5.9 Medium · Not analysed yet · Published 10 May 2022
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22443.md)
  `CVE-2022-22443` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 28 Apr 2022
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to view…](https://agentprime.io/advisories/CVE-2022-22441.md)
  `CVE-2022-22441` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 28 Apr 2022
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22427.md)
  `CVE-2022-22427` · CVE record: IBM InfoSphere Information Server · CVSS 5.2 Medium · Not analysed yet · Published 28 Apr 2022
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22322.md)
  `CVE-2022-22322` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 28 Apr 2022
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-38952.md)
  `CVE-2021-38952` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 28 Apr 2022
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain…](https://agentprime.io/advisories/CVE-2021-38887.md)
  `CVE-2021-38887` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 10 Nov 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection…](https://agentprime.io/advisories/CVE-2021-38948.md)
  `CVE-2021-38948` · CVE record: IBM InfoSphere Information Server · CVSS 7.1 High · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which…](https://agentprime.io/advisories/CVE-2021-29888.md)
  `CVE-2021-29888` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive…](https://agentprime.io/advisories/CVE-2021-29875.md)
  `CVE-2021-29875` · CVE record: IBM InfoSphere Information Server · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29771.md)
  `CVE-2021-29771` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable…](https://agentprime.io/advisories/CVE-2021-29738.md)
  `CVE-2021-29738` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 )…](https://agentprime.io/advisories/CVE-2021-29737.md)
  `CVE-2021-29737` · CVE record: IBM InfoSphere Information Server · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2021
- [IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2021-29730.md)
  `CVE-2021-29730` · CVE record: IBM InfoSphere Information Server · CVSS 6.3 Medium · Not analysed yet · Published 9 Jul 2021
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29712.md)
  `CVE-2021-29712` · CVE record: IBM InfoSphere Information Server · CVSS 6.1 Medium · Not analysed yet · Published 9 Jul 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive…](https://agentprime.io/advisories/CVE-2021-29681.md)
  `CVE-2021-29681` · CVE record: IBM InfoSphere Information Server · CVSS 3.1 Low · Not analysed yet · Published 21 May 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly…](https://agentprime.io/advisories/CVE-2021-29747.md)
  `CVE-2021-29747` · CVE record: IBM InfoSphere Information Server · CVSS 5.9 Medium · Not analysed yet · Published 17 May 2021
- [IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4997.md)
  `CVE-2020-4997` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 5 Apr 2021
- [IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's…](https://agentprime.io/advisories/CVE-2020-4886.md)
  `CVE-2020-4886` · CVE record: IBM InfoSphere Information Server · CVSS 4.0 Medium · Not analysed yet · Published 13 Nov 2020

Newest: <https://agentprime.io/advisories/technology/ibm-infosphere-information-server.md>
Older: <https://agentprime.io/advisories/technology/ibm-infosphere-information-server.md?cursor=WyIyMDIwLTExLTEzVDE1OjEwOjE2Ljc2NTAwMFoiLCJDVkUtMjAyMC00ODg2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-infosphere-information-server&cursor=WyIyMDI0LTAyLTI4VDAwOjEwOjIyLjI2MjAwMFoiLCJDVkUtMjAyMy01MDMwMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-infosphere-information-server/?cursor=WyIyMDI0LTAyLTI4VDAwOjEwOjIyLjI2MjAwMFoiLCJDVkUtMjAyMy01MDMwMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.