II
Product
IBM InfoSphere Information Server
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch
Add IBM InfoSphere Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22425 | 9.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection Affected: 11.7 |
| CVE-2022-40747 | 9.1 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.7 |
| CVE-2022-30608 | 8.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7 |
| CVE-2022-35717 | 7.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request Affected: 11.7 |
| CVE-2022-40235 | 6.5 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation Affected: 11.7 |
| CVE-2022-22442 | 6.5 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls Affected: 11.7 |
| CVE-2022-30615 | 5.4 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-35642 | 5.4 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
Showing 8