Infosphere Information Server (Ibm) - vulnerabilities (CVEs)

189 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2026-06-30. Vendor: Ibm.

CVEs of Infosphere Information Server

CVE-2026-9836 - CVSS 7.5 (high), 2026-06-30: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.
CVE-2026-2485 - CVSS 4.8 (medium), 2026-03-25: IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed…
CVE-2026-2484 - CVSS 4.3 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages
CVE-2026-2483 - CVSS 5.4 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2026-1015 - CVSS 5.4 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to…
CVE-2026-1014 - CVSS 6.5 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation.
CVE-2026-1262 - CVSS 4.3 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.
CVE-2025-36422 - CVSS 4.3 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which could…
CVE-2025-36258 - CVSS 7.1 (high), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by…
CVE-2025-14974 - CVSS 7.5 (high), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference (IDOR).
CVE-2025-14912 - CVSS 5.4 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to…
CVE-2025-14810 - CVSS 6.5 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an…
CVE-2025-14808 - CVSS 3.1 (low), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET…
CVE-2025-14807 - CVSS 6.5 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the…
CVE-2025-14790 - CVSS 6.5 (medium), 2026-03-25: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-1567 - CVSS 7.5 (high), 2026-03-03: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow…
CVE-2026-1265 - CVSS 5.3 (medium), 2026-03-03: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.
CVE-2025-12832 - CVSS 4.6 (medium), 2025-12-08: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to…
CVE-2025-12531 - CVSS 9.1 (critical), 2025-11-03: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote…
CVE-2025-33003 - CVSS 7.8 (high), 2025-10-31: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher privileges/capabilities within the scope of a container…
CVE-2025-36245 - CVSS 8.8 (high), 2025-09-29: IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the…
CVE-2025-36034 - CVSS 5.9 (medium), 2025-06-26: IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could…
CVE-2025-0966 - CVSS 7.6 (high), 2025-06-25: IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the…
CVE-2025-3221 - CVSS 7.5 (high), 2025-06-21: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of…
CVE-2025-3629 - CVSS 4.3 (medium), 2025-06-21: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership…
CVE-2025-1499 - CVSS 6.5 (medium), 2025-06-01: IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an…
CVE-2025-1138 - CVSS 4.3 (medium), 2025-05-15: IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system…
CVE-2025-25046 - CVSS 3.7 (low), 2025-04-23: IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an…
CVE-2025-25045 - CVSS 4.3 (medium), 2025-04-23: IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.…
CVE-2024-22351 - CVSS 6.3 (medium), 2025-04-23: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…
CVE-2024-55895 - CVSS 5.3 (medium), 2025-03-29: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in…
CVE-2024-7577 - CVSS 7.5 (high), 2025-03-29: IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product.
CVE-2024-43186 - CVSS 6.5 (medium), 2025-03-29: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions.
CVE-2024-51477 - CVSS 6.5 (medium), 2025-03-29: IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an observable response discrepancy.
CVE-2024-51459 - CVSS 8.4 (high), 2025-03-19: IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper handling of permissions.
CVE-2024-40706 - CVSS 5.3 (medium), 2025-01-24: IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.
CVE-2024-52363 - CVSS 7.5 (high), 2025-01-17: IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL…
CVE-2021-29827 - CVSS 5.2 (medium), 2024-12-19: IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious…
CVE-2024-52901 - CVSS 6.5 (medium), 2024-12-12: IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation.
CVE-2024-51460 - CVSS 4.3 (medium), 2024-12-11: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed technical error message is returned…
CVE-2023-23472 - CVSS 6.5 (medium), 2024-12-11: IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid…
CVE-2024-40705 - CVSS 6.5 (medium), 2024-08-15: IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted file uploads. IBM X-Force ID: 298279.
CVE-2024-40704 - CVSS 4.9 (medium), 2024-08-15: IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. IBM X-Force ID:…
CVE-2024-39751 - CVSS 4.3 (medium), 2024-08-06: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in…
CVE-2024-40689 - CVSS 9.8 (critical), 2024-07-26: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the…
CVE-2024-37533 - CVSS 4.6 (medium), 2024-07-24: IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727.
CVE-2024-40690 - CVSS 5.4 (medium), 2024-07-12: IBM InfoSphere Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the…
CVE-2024-28794 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-50964 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2024-31898 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure…
CVE-2024-28797 - CVSS 6.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2023-50953 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This…
CVE-2023-50952 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…
CVE-2024-35119 - CVSS 5.3 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a…
CVE-2023-50954 - CVSS 5.3 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force…
CVE-2024-31902 - CVSS 8.8 (high), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2024-28798 - CVSS 7.2 (high), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2024-28795 - CVSS 5.4 (medium), 2024-06-30: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-35022 - CVSS 3.3 (low), 2024-06-30: IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorization to access. IBM X-Force ID: 258254.
CVE-2024-22352 - CVSS 6.5 (medium), 2024-03-21: IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 280361.
CVE-2023-50303 - CVSS 6.1 (medium), 2024-02-28: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-50955 - CVSS 2.7 (low), 2024-02-21: IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid…
CVE-2023-33843 - CVSS 5.4 (medium), 2024-02-21: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-46174 - CVSS 5.4 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-43021 - CVSS 5.3 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in…
CVE-2023-42022 - CVSS 5.4 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-42019 - CVSS 5.9 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
CVE-2023-42009 - CVSS 5.4 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-40699 - CVSS 7.5 (high), 2023-12-01: IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
CVE-2023-38268 - CVSS 8.8 (high), 2023-12-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2023-43015 - CVSS 5.4 (medium), 2023-12-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-40363 - CVSS 8.1 (high), 2023-11-18: IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force…
CVE-2023-23473 - CVSS 8.8 (high), 2023-08-28: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2023-24959 - CVSS 7.5 (high), 2023-08-28: IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.
CVE-2023-22877 - CVSS 8.8 (high), 2023-08-28: IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by…
CVE-2023-35898 - CVSS 6.5 (medium), 2023-07-19: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in…
CVE-2023-33857 - CVSS 5.3 (medium), 2023-07-17: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further…
CVE-2023-32336 - CVSS 9.8 (critical), 2023-05-22: IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID:…
CVE-2023-28529 - CVSS 5.5 (medium), 2023-05-19: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2023-22878 - CVSS 6.2 (medium), 2023-05-19: IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.
CVE-2022-47984 - CVSS 9.8 (critical), 2023-05-19: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the…
CVE-2023-30441 - CVSS 7.5 (high), 2023-04-29: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a…
CVE-2023-25928 - CVSS 5.4 (medium), 2023-02-21: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-24960 - CVSS 7.5 (high), 2023-02-17: IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL…
CVE-2023-24964 - CVSS 6.2 (medium), 2023-02-17: IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463.
CVE-2023-23475 - CVSS 4.6 (medium), 2023-02-08: IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2022-47983 - CVSS 5.4 (medium), 2023-02-01: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2022-41733 - CVSS 5.3 (medium), 2023-01-20: IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted. IBM…
CVE-2022-40752 - CVSS 9.8 (critical), 2022-11-16: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.
CVE-2022-40753 - CVSS 5.4 (medium), 2022-11-15: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2022-40235 - CVSS 6.5 (medium), 2022-11-03: "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation.…
CVE-2022-40747 - CVSS 9.1 (critical), 2022-11-03: "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could…
CVE-2022-35717 - CVSS 7.8 (high), 2022-11-03: "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially…
CVE-2022-30615 - CVSS 5.4 (medium), 2022-11-03: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2022-30608 - CVSS 8.8 (high), 2022-11-03: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
CVE-2022-35642 - CVSS 5.4 (medium), 2022-11-03: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2022-22442 - CVSS 6.5 (medium), 2022-11-03: "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper…
CVE-2022-22425 - CVSS 9.8 (critical), 2022-11-03: "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused…
CVE-2022-36772 - CVSS 6.5 (medium), 2022-10-07: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user.
CVE-2022-41291 - CVSS 6.5 (medium), 2022-10-07: IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…