Skip to content

Known vulnerabilities in IBM InfoSphere Information Server

Is your version affected?

CVE Summary Score Published
CVE-2019-4257 IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability 4.3 Medium Jun 6, 2019
CVE-2019-4220 IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt… 6.2 Medium Jun 6, 2019
CVE-2019-4185 IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely… 8.3 High Jun 6, 2019
CVE-2019-4238 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting 5.4 Medium Apr 25, 2019
CVE-2018-1994 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection 6.3 Medium Apr 10, 2019
CVE-2018-1906 IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a… 4.3 Medium Apr 2, 2019
CVE-2018-1917 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and… 3.5 Low Apr 2, 2019
CVE-2018-1899 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related… 4.3 Medium Mar 5, 2019
CVE-2018-1895 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting 5.4 Medium Feb 15, 2019
CVE-2018-1727 IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE)… 7.1 High Feb 15, 2019
CVE-2018-1701 IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject… 8.5 High Feb 15, 2019
CVE-2018-1518 IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a… 6.2 Medium Oct 18, 2018
CVE-2018-1454 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information,… 5.9 Medium Jun 5, 2018
CVE-2018-1432 IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a… 6.1 Medium Jun 5, 2018
CVE-2017-1350 IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to… 8.4 High Jun 5, 2018
CVE-2017-1469 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing… Not rated Aug 14, 2017
CVE-2017-1495 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could… Not rated Aug 2, 2017
CVE-2017-1468 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing… Not rated Aug 2, 2017
CVE-2017-1467 A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege… Not rated Aug 2, 2017
CVE-2017-1383 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when… Not rated Aug 2, 2017
CVE-2017-1321 IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting Not rated Jul 12, 2017

Other IBM products