II
Product
InfoSphere Information Server on Cloud
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 20Low 0
Watch
Add InfoSphere Information Server on Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1499 | 6.5 | Jun 1 | IBM InfoSphere Information Server information disclosure Affected: 11.7 |
| CVE-2022-22442 | 6.5 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls Affected: 11.7 |
| CVE-2020-4286 | 6.5 | May 19 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 11.5; 11.7 |
| CVE-2018-1917 | 6.5 | Apr 2 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information Affected: 11.5; 11.7 |
| CVE-2018-1906 | 6.5 | Apr 2 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request Affected: 11.5; 11.7 |
| CVE-2018-1875 | 6.1 | Mar 5 | IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 11.5; 11.7 |
| CVE-2017-1321 | 6.1 | Jul 12 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting Affected: 11.5 |
| CVE-2016-9000 | 6.1 | Feb 1 | IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection Affected: 11.5 |
| CVE-2016-5984 | 6.1 | Feb 1 | IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection Affected: 11.5 |
| CVE-2019-4220 | 5.5 | Jun 6 | IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information Affected: 11.7.1.0 |
| CVE-2018-1518 | 5.5 | Oct 18 | IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information Affected: 11.7 |
| CVE-2020-4298 | 5.4 | May 19 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.5; 11.7 |
| CVE-2020-4384 | 5.4 | May 6 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.5; 11.7 |
| CVE-2019-4237 | 5.4 | Jul 1 | A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag… Affected: 11.5; 11.7 |
| CVE-2019-4238 | 5.4 | Apr 25 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.5; 11.7 |
| CVE-2018-1895 | 5.4 | Feb 15 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.5; 11.7 |
| CVE-2016-8999 | 5.4 | Feb 1 | IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker… Affected: 11.5 |
| CVE-2025-1138 | 4.3 | May 15 | IBM Information Server information disclosure Affected: 11.7 |
| CVE-2019-4257 | 4.3 | Jun 6 | IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability Affected: 11.5; 11.7 |
| CVE-2018-1899 | 4.3 | Mar 5 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper… Affected: 11.5; 11.7 |
Showing 20