Skip to content

Known vulnerabilities in IBM InfoSphere Information Server

Is your version affected?

CVE Summary Score Published
CVE-2021-38948 IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing… 7.1 High Nov 2, 2021
CVE-2021-29888 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to… 6.5 Medium Nov 2, 2021
CVE-2021-29875 IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third… 5.9 Medium Nov 2, 2021
CVE-2021-29771 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting 5.4 Medium Nov 2, 2021
CVE-2021-29738 IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery… 5.4 Medium Nov 2, 2021
CVE-2021-29737 IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation… 5.9 Medium Nov 2, 2021
CVE-2021-29730 IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection 6.3 Medium Jul 9, 2021
CVE-2021-29712 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting 6.1 Medium Jul 9, 2021
CVE-2021-29681 IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters… 3.1 Low May 21, 2021
CVE-2021-29747 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a… 5.9 Medium May 17, 2021
CVE-2020-4997 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting 5.4 Medium Apr 5, 2021
CVE-2020-4886 IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a… 4.0 Medium Nov 13, 2020
CVE-2020-4741 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting 6.4 Medium Oct 12, 2020
CVE-2020-4740 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection 5.2 Medium Oct 12, 2020
CVE-2020-4727 IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim 6.1 Medium Sep 25, 2020
CVE-2020-4702 IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting 6.4 Medium Sep 4, 2020
CVE-2020-4632 IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery 5.7 Medium Sep 4, 2020
CVE-2020-4305 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the… 8.1 High Jul 9, 2020
CVE-2020-4298 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting 5.4 Medium May 19, 2020
CVE-2020-4286 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow… 4.3 Medium May 19, 2020
CVE-2020-4384 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting 5.4 Medium May 6, 2020
CVE-2020-4347 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due… 7.3 High Apr 16, 2020
CVE-2020-4162 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting 5.4 Medium Mar 10, 2020
CVE-2019-4237 A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to… 5.4 Medium Jul 1, 2019
CVE-2018-1845 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack… 7.1 High Jun 17, 2019

Other IBM products