Vulnerabilities > IBM > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-06-30 CVE-2023-50952 Server-Side Request Forgery (SSRF) vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF).
network
low complexity
ibm CWE-918
5.4
2024-06-30 CVE-2023-50953 Information Exposure Through an Error Message vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.
network
low complexity
ibm CWE-209
4.3
2024-06-30 CVE-2024-28797 Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2024-06-30 CVE-2024-31898 Authorization Bypass Through User-Controlled Key vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.
network
low complexity
ibm CWE-639
5.4
2024-06-30 CVE-2023-50954 Unspecified vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system.
network
low complexity
ibm
5.3
2024-06-30 CVE-2024-28798 Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2024-06-30 CVE-2024-35119 Information Exposure Through an Error Message vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace.
network
low complexity
ibm CWE-209
5.3
2024-06-30 CVE-2024-28795 Cross-site Scripting vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2024-06-28 CVE-2024-25031 Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Storage Defender 2.0.0/2.0.4
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials.
low complexity
ibm CWE-307
6.5
2024-06-28 CVE-2024-25041 Cross-site Scripting vulnerability in IBM Cognos Analytics
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS).
network
low complexity
ibm CWE-79
5.4