II
Product
InfoSphere Information Server
191
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 106Low 6
Watch
Add InfoSphere Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40706 | 4.3 | Jan 24 | IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system Affected: 11.7 |
| CVE-2024-51460 | 4.3 | Dec 11 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed technical error message is returned in a stack trace Affected: 11.7 |
| CVE-2024-39751 | 4.3 | Aug 6 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.7 |
| CVE-2023-50953 | 4.3 | Jun 30 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned Affected: 11.7 |
| CVE-2018-1899 | 4.3 | Mar 5 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper… Affected: 11.3; 11.5; 11.7 |
| CVE-2025-25046 | 3.7 | Apr 23 | IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using… Affected: 11.7 |
| CVE-2023-35022 | 3.3 | Jun 30 | IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorization to access Affected: 11.7 |
| CVE-2020-4886 | 3.3 | Nov 13 | IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system Affected: 11.7 |
| CVE-2025-14808 | 3.1 | Mar 25 | IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2015-7490 | 3.1 | Mar 3 | IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended… Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +7 more |
| CVE-2023-50955 | 2.7 | Feb 21 | IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks… Affected: 11.7 |
| CVE-2015-5021 | – | Nov 4 | IBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to bypass intended job-execution restrictions or obtain sensitive information via… Affected: 11.3; 11.5 |
| CVE-2015-1901 | – | Jun 28 | The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +6 more |
| CVE-2015-0180 | – | May 25 | The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and… Affected: 8.1; 8.5; 8.7; 9.1; 9.1.2; 11.3 |
| CVE-2014-3071 | – | Jul 26 | Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 11.3 |
| CVE-2013-4059 | – | Mar 16 | Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote… Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +4 more |
| CVE-2013-4058 | – | Mar 16 | Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users… Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +4 more |
| CVE-2013-4057 | – | Mar 16 | Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows… Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +4 more |
| CVE-2013-5440 | – | Dec 18 | IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file… Affected: 8.0; 8.1; 8.5; 8.7; 9.1 |
| CVE-2013-4056 | – | Oct 13 | Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1… Affected: 8.7; 8.7.0.1; 8.7.0.2; 9.1; 9.1.0.1; 9.1.2 |
| CVE-2013-4067 | – | Oct 2 | IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture… Affected: 8.0; 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; +2 more |
| CVE-2013-4066 | – | Oct 2 | IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the… Affected: 8.0; 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; +2 more |
| CVE-2013-3040 | – | Aug 16 | IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows… Affected: 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; 8.7.0.1; +2 more |
| CVE-2013-3034 | – | Aug 16 | Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web… Affected: through 8.5; 8.1; 8.7; 9.1 |
| CVE-2013-0585 | – | Aug 16 | Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject… Affected: 8.1; 8.5; 8.7; 9.1 |
| CVE-2013-0502 | – | Apr 1 | Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.7; +3 more |
| CVE-2012-5938 | – | Mar 20 | The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which… Affected: 8.1; 8.5; 8.7; 9.1 |
| CVE-2012-4832 | – | Jan 31 | Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-4819 | – | Jan 31 | Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0705 | – | Jan 31 | InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7; 9.1 |
| CVE-2012-0703 | – | Jan 31 | Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to redirect users to… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0702 | – | Jan 31 | Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0701 | – | Jan 31 | The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0700 | – | Jan 31 | The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0205 | – | Jan 31 | InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly restrict use of the troubleshooting… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7 |
| CVE-2012-0204 | – | Jan 31 | Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2; 8.7; 9.1 |
| CVE-2012-0203 | – | Jan 31 | Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote… Affected: 8.1; 8.5; 8.5.0.1; 8.5.0.2 |
| CVE-2011-3124 | – | Aug 10 | IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to… Affected: 8.5; 8.5.0.1 |
| CVE-2011-3123 | – | Aug 10 | IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified… Affected: 8.5; 8.5.0.1 |
| CVE-2009-4240 | – | Dec 9 | Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors Affected: 8.1 |
| CVE-2009-4239 | – | Dec 9 | Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.1 |