5.4
Medium
CVE-2024-49343 IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection
Description
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Informix Dynamic Server | 14.10 | No fix stated |
| Informix Dynamic Server | 12.10 | No fix stated |
Other CVEs of Informix Dynamic Server
The 12 CVEs of Informix Dynamic Server →
CVE-2026-13476
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands…
7.3
High
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root…
7.8
High
CVE-2026-13361
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field
8.8
High
CVE-2024-45675
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as…
8.4
High