IBM InfoSphere Information Server

CVE-2024-28797 Medium 6.4 IBM InfoSphere Information Server cross-site scripting 0.3%
CVE-2024-31898 Medium 5.4 IBM InfoSphere Information Server data modification 0.3%
CVE-2023-50954 Medium 4.3 IBM InfoSphere Information Server information disclosure 0.4%
CVE-2024-31902 Medium 4.3 IBM InfoSphere Information Server cross-site request forgery 0.3%
CVE-2024-35119 Medium 5.3 IBM InfoSphere Information Server information disclosure 0.4%
CVE-2024-28798 High 7.2 IBM InfoSphere Information Server cross-site scripting 0.3%
CVE-2023-35022 Low 3.3 IBM InfoSphere Information Server improper authentication 0.2%
CVE-2024-28795 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.3%
CVE-2024-22352 Medium 6.5 IBM InfoSphere Information Server information disclosure 0.5%
CVE-2023-50303 Medium 6.1 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-50955 Low 2.4 IBM InfoSphere Information Server information disclosure 0.6%
CVE-2023-33843 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-46174 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-42019 Medium 5.9 IBM InfoSphere Information Server information disclosure 0.5%
CVE-2023-40699 High 7.5 IBM InfoSphere Information Server denial of service 1.1%
CVE-2023-42022 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-43021 Medium 5.3 IBM InfoSphere Information Server information disclosure 0.7%
CVE-2023-42009 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-43015 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-38268 Medium 4.3 IBM InfoSphere Information Server cross-site request forgery 0.3%
CVE-2023-40363 High 8.1 IBM InfoSphere Information Server privilege escalation 0.6%
CVE-2023-24959 Medium 5.3 IBM InfoSphere Information Server information disclosure 0.6%
CVE-2023-23473 Medium 5.3 IBM InfoSphere Information Server cross-site request forgery 0.3%
CVE-2023-22877 High 7.0 IBM InfoSphere Information Server CSV injection 0.7%
CVE-2023-35898 Medium 4.3 IBM InfoSphere Information Server information disclosure 0.5%
CVE-2023-33857 Medium 5.3 IBM InfoSphere Information Server information disclosure 0.7%
CVE-2023-32336 High 8.8 IBM InfoSphere Information Server code execution 1.4%
CVE-2022-47984 Medium 6.3 IBM InfoSphere Information Server SQL injection 0.7%
CVE-2023-22878 Medium 6.2 IBM InfoSphere Information Server information disclosure 0.1%
CVE-2023-28529 Medium 5.5 IBM InfoSphere Information Server 11.7 0.4%
CVE-2023-25928 Medium 4.6 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2023-24960 High 7.5 IBM InfoSphere Information Server information disclosure 1.4%
CVE-2023-24964 Medium 6.2 IBM InfoSphere Information Server information disclosure 0.1%
CVE-2023-23475 Medium 4.6 IBM Infosphere Information Server cross-site scripting 0.3%
CVE-2022-47983 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2022-41733 Medium 5.3 IBM InfoSphere Information Server denial of service 0.7%
CVE-2022-40753 Medium 5.4 IBM InfoSphere Information Server cross-site scripting 0.4%
CVE-2022-41291 Medium 6.3 IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699. 0.4%
CVE-2022-36772 Medium 4.3 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. 0.7%
CVE-2022-40748 Medium 5.4 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.7%
CVE-2022-35715 Medium 5.3 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be use 1.1%
CVE-2022-22373 Medium 4.6 An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain n 0.5%
CVE-2022-31768 Medium 5.3 IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete info 1.4%
CVE-2022-22454 Medium 5.9 IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. 0.4%
CVE-2022-22443 Medium 5.4 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.5%
CVE-2022-22441 Medium 6.5 IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426. 0.9%
CVE-2022-22427 Medium 5.2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.6%
CVE-2022-22322 Medium 5.4 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.5%
CVE-2021-38952 Medium 5.4 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality 0.5%
CVE-2021-38887 Medium 4.3 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IB 0.8%