5.4
Moyenne
CVE-2024-49343 IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection
Description
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Informix Dynamic Server | 14.10 | Pas de correctif indiqué |
| Informix Dynamic Server | 12.10 | Pas de correctif indiqué |
Autres CVE de Informix Dynamic Server
Les 12 CVE de Informix Dynamic Server →
CVE-2026-13476
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands…
7.3
Élevée
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root…
7.8
Élevée
CVE-2026-13361
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field
8.8
Élevée
CVE-2024-45675
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as…
8.4
Élevée