II
Product
InfoSphere Information Server on Cloud
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 20Low 0
Watch
Add InfoSphere Information Server on Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4305 | 8.8 | Jul 9 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data Affected: 11.7.0.0 through 11.7.1.1; 11.5.0.0 |
| CVE-2018-1701 | 8.5 | Feb 15 | IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the… Affected: 11.7 |
| CVE-2019-4185 | 8.3 | Jun 6 | IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component Affected: 11.7.1 |
| CVE-2016-6059 | 8.1 | Feb 1 | IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 11.5 |
| CVE-2022-22454 | 7.8 | May 10 | IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request Affected: 11.7 |
| CVE-2018-1845 | 7.1 | Jun 17 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 11.5; 11.7 |
Showing 6