5.9
Moyenne
CVE-2018-1454 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information,…
Description
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| InfoSphere Information Server | 11.7 | Pas de correctif indiqué |
| InfoSphere Information Server | 11.5 | Pas de correctif indiqué |
| InfoSphere Information Server | 11.3 | Pas de correctif indiqué |
Autres CVE de InfoSphere Information Server
Les 146 CVE de InfoSphere Information Server →
CVE-2026-9836
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability
3.5
Faible
CVE-2025-14807
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper…
6.5
Moyenne
CVE-2026-1015
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF)
5.4
Moyenne
CVE-2026-1014
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via…
6.5
Moyenne