Vulnerabilities > IBM > Infosphere Information Server > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-03-21 | CVE-2024-22352 | Information Exposure Through Log Files vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. | 5.5 |
2023-12-01 | CVE-2023-42009 | Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. | 5.4 |
2023-12-01 | CVE-2023-42019 | Missing Encryption of Sensitive Data vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. | 5.9 |
2023-12-01 | CVE-2023-42022 | Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. | 5.4 |
2023-12-01 | CVE-2023-43021 | Information Exposure Through an Error Message vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 5.3 |
2023-12-01 | CVE-2023-46174 | Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. | 5.4 |
2023-12-01 | CVE-2023-43015 | Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7.1 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. | 5.4 |
2023-11-18 | CVE-2023-40363 | Incorrect Default Permissions vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. | 6.5 |
2023-07-19 | CVE-2023-35898 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. | 6.5 |
2023-07-17 | CVE-2023-33857 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. | 5.3 |