II
Product
InfoSphere Information Server
191
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 106Low 6
Watch
Add InfoSphere Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46174 | 5.4 | Dec 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-42022 | 5.4 | Dec 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-42009 | 5.4 | Dec 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-43015 | 5.4 | Dec 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-28529 | 5.4 | May 19 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting Affected: 11.7 |
| CVE-2023-25928 | 5.4 | Feb 21 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-47983 | 5.4 | Feb 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-40753 | 5.4 | Nov 15 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-30615 | 5.4 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-35642 | 5.4 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-40748 | 5.4 | Sep 23 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-22373 | 5.4 | Jul 1 | An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file… Affected: 11.7 |
| CVE-2022-22443 | 5.4 | Apr 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-22322 | 5.4 | Apr 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2021-38952 | 5.4 | Apr 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2021-29771 | 5.4 | Nov 2 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2021-29738 | 5.4 | Nov 2 | IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF) Affected: 11.7 |
| CVE-2020-4997 | 5.4 | Apr 5 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2020-4741 | 5.4 | Oct 12 | IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting Affected: 11.5; 11.7 |
| CVE-2020-4702 | 5.4 | Sep 4 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting Affected: 11.7 |
| CVE-2020-4298 | 5.4 | May 19 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.3 |
| CVE-2020-4162 | 5.4 | Mar 10 | IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting Affected: 11.5; 11.7 |
| CVE-2019-4237 | 5.4 | Jul 1 | A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag… Affected: 11.3; 11.5; 11.7 |
| CVE-2019-4238 | 5.4 | Apr 25 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.3; 11.5; 11.7 |
| CVE-2018-1895 | 5.4 | Feb 15 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting Affected: 11.3; 11.5; 11.7 |
| CVE-2016-0250 | 5.4 | Mar 12 | XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read… Affected: 11.3 before 11.3.1.2; 11.5 |
| CVE-2016-8999 | 5.4 | Feb 1 | IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker… Affected: 8.7; 9.1; 11.3; 11.5 |
| CVE-2026-1265 | 5.3 | Mar 3 | IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2024-55895 | 5.3 | Mar 29 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.7 before 11.7.1 |
| CVE-2024-35119 | 5.3 | Jun 30 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace Affected: 11.7 |
| CVE-2023-50954 | 5.3 | Jun 30 | IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system Affected: 11.7 |
| CVE-2023-43021 | 5.3 | Dec 1 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-33857 | 5.3 | Jul 17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the… Affected: 11.7 |
| CVE-2022-41733 | 5.3 | Jan 20 | IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted Affected: before 11.7.1.4 |
| CVE-2021-29681 | 5.3 | May 21 | IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query Affected: 11.7 |
| CVE-2021-29827 | 5.2 | Dec 18 | IBM InfoSphere Information Server clickjacking Affected: 11.7 |
| CVE-2020-4740 | 5.2 | Oct 12 | IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection Affected: 11.5; 11.7 |
| CVE-2024-40704 | 4.9 | Aug 15 | IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers Affected: 11.7; 11.7.0.1; 11.7.0.2 |
| CVE-2017-1495 | 4.9 | Aug 2 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access… Affected: 9.1; 11.3; 11.5; 11.5 |
| CVE-2026-2485 | 4.8 | Mar 25 | IBM InfoSphere Information Server Cross-Site Scripting Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2015-7493 | 4.7 | Feb 8 | IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information Affected: 8.5; 8.7; 9.1; 11.3; 11.5 |
| CVE-2024-37533 | 4.6 | Jul 24 | IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine Affected: 11.7 |
| CVE-2023-23475 | 4.6 | Feb 8 | IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2026-2484 | 4.3 | Mar 25 | IBM InfoSphere Information Server Information Disclosure Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-36422 | 4.3 | Mar 25 | IBM InfoSphere Information Server is vulnerable to cross-site request forgery Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2026-1262 | 4.3 | Mar 25 | IBM InfoSphere Information Server Information Disclosure Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-12832 | 4.3 | Dec 8 | IBM InfoSphere Information Server Server-Side Request Forgery Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-3629 | 4.3 | Jun 21 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management Affected: 11.7 through 11.7.1.6 |
| CVE-2025-1138 | 4.3 | May 15 | IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory… Affected: 11.7 |
| CVE-2025-25045 | 4.3 | Apr 23 | IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request Affected: 11.7 before 11.7.1 |