Advisories · Technology

IBM InfoSphere Information Server.

Every CVE that names IBM InfoSphere Information Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-50955 CVE record

CVSS 2.4 Low

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Path traversal
Not analysed yet 21 Feb 2024
CVE-2023-33843 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2024
CVE-2023-46174 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2023
CVE-2023-42019 CVE record

CVSS 5.9 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Weak cryptography or TLS
Not analysed yet 1 Dec 2023
CVE-2023-40699 CVE record

CVSS 7.5 High

IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- CWE-20
Not analysed yet 1 Dec 2023
CVE-2023-42022 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2023
CVE-2023-43021 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 1 Dec 2023
CVE-2023-42009 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2023
CVE-2023-43015 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2023
CVE-2023-38268 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server cross-site request forgery
- IBM InfoSphere Information Server
- Cross-site request forgery (CSRF)
Not analysed yet 1 Dec 2023
CVE-2023-40363 CVE record

CVSS 8.1 High

IBM InfoSphere Information Server privilege escalation
- IBM InfoSphere Information Server
Not analysed yet 18 Nov 2023
CVE-2023-24959 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 28 Aug 2023
CVE-2023-23473 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server cross-site request forgery
- IBM InfoSphere Information Server
- Cross-site request forgery (CSRF)
Not analysed yet 28 Aug 2023
CVE-2023-22877 CVE record

CVSS 7.0 High

IBM InfoSphere Information Server CSV injection
- IBM InfoSphere Information Server
- Other injection
Not analysed yet 28 Aug 2023
CVE-2023-35898 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 19 Jul 2023
CVE-2023-33857 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 16 Jul 2023
CVE-2023-32336 CVE record

CVSS 8.8 High

IBM InfoSphere Information Server code execution
- IBM InfoSphere Information Server
- Insecure deserialization
Not analysed yet 22 May 2023
CVE-2022-47984 CVE record

CVSS 6.3 Medium

IBM InfoSphere Information Server SQL injection
- IBM InfoSphere Information Server
- SQL injection
Not analysed yet 19 May 2023
CVE-2023-22878 CVE record

CVSS 6.2 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
Not analysed yet 19 May 2023
CVE-2023-28529 CVE record

CVSS 5.5 Medium

IBM InfoSphere Information Server 11.7
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 19 May 2023
CVE-2023-25928 CVE record

CVSS 4.6 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2023
CVE-2023-24960 CVE record

CVSS 7.5 High

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Path traversal
Not analysed yet 17 Feb 2023
CVE-2023-24964 CVE record

CVSS 6.2 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 17 Feb 2023
CVE-2023-23475 CVE record

CVSS 4.6 Medium

IBM Infosphere Information Server cross-site scripting
- IBM Infosphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 8 Feb 2023
CVE-2022-47983 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2023
CVE-2022-41733 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- CWE-20
Not analysed yet 20 Jan 2023
CVE-2022-40753 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2022
CVE-2022-40747 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

XML external entity injection in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- XML external entities (XXE)
Not analysed yet 3 Nov 2022
CVE-2022-40235 CVE record

CVSS 6.5 Medium

Improper input validation in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- CWE-20
Not analysed yet 3 Nov 2022
CVE-2022-35717 CVE record

CVSS 7.8 High

OS command injection in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Command injection
Not analysed yet 3 Nov 2022
CVE-2022-35642 CVE record

CVSS 5.4 Medium

OS command injection in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Command injection
Not analysed yet 3 Nov 2022
CVE-2022-30615 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2022
CVE-2022-30608 CVE record

CVSS 8.8 High

Cross-site request forgery in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Cross-site request forgery (CSRF)
Not analysed yet 3 Nov 2022
CVE-2022-22442 CVE record

CVSS 6.5 Medium

Improper access control in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Broken access control
Not analysed yet 3 Nov 2022
CVE-2022-22425 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CSV injection in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Other injection
Not analysed yet 3 Nov 2022
CVE-2022-41291 CVE record

CVSS 6.3 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 does not invalidate session after logout which…
- IBM InfoSphere Information Server
Not analysed yet 7 Oct 2022
CVE-2022-36772 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain…
- IBM InfoSphere Information Server
Not analysed yet 7 Oct 2022
CVE-2022-40748 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2022
CVE-2022-35715 CVE record

CVSS 5.3 Medium

Information disclosure in IBM InfoSphere Information Server
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 10 Aug 2022
CVE-2022-22373 CVE record

CVSS 4.6 Medium

IBM InfoSphere Information Server: An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for…
- IBM InfoSphere Information Server
Not analysed yet 1 Jul 2022
CVE-2022-31768 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
- IBM InfoSphere Information Server
Not analysed yet 6 Jun 2022
CVE-2022-22454 CVE record

CVSS 5.9 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to…
- IBM InfoSphere Information Server
Not analysed yet 10 May 2022
CVE-2022-22443 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 28 Apr 2022
CVE-2022-22441 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to view…
- IBM InfoSphere Information Server
Not analysed yet 28 Apr 2022
CVE-2022-22427 CVE record

CVSS 5.2 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 28 Apr 2022
CVE-2022-22322 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 28 Apr 2022
CVE-2021-38952 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 28 Apr 2022
CVE-2021-38887 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain…
- IBM InfoSphere Information Server
Not analysed yet 10 Nov 2021
CVE-2021-38948 CVE record

CVSS 7.1 High

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection…
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29888 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which…
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29875 CVE record

CVSS 5.9 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive…
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29771 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29738 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server: IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable…
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29737 CVE record

CVSS 5.9 Medium

IBM InfoSphere Information Server: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 )…
- IBM InfoSphere Information Server
Not analysed yet 2 Nov 2021
CVE-2021-29730 CVE record

CVSS 6.3 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
- IBM InfoSphere Information Server
Not analysed yet 9 Jul 2021
CVE-2021-29712 CVE record

CVSS 6.1 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 9 Jul 2021
CVE-2021-29681 CVE record

CVSS 3.1 Low

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive…
- IBM InfoSphere Information Server
Not analysed yet 21 May 2021
CVE-2021-29747 CVE record

CVSS 5.9 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly…
- IBM InfoSphere Information Server
Not analysed yet 17 May 2021
CVE-2020-4997 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- IBM InfoSphere Information Server
Not analysed yet 5 Apr 2021
CVE-2020-4886 CVE record

CVSS 4.0 Medium

IBM InfoSphere Information Server: IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's…
- IBM InfoSphere Information Server
Not analysed yet 13 Nov 2020