IBM InfoSphere Information Server vulnerabilities
We track 4 vulnerabilities in IBM InfoSphere Information Server products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2022.
Latest IBM InfoSphere Information Server vulnerabilities
- 9.1 Critical severity
IBM InfoSphere Information Server: Improper Restriction of XML External Entity Reference
"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236
- 7.8 High severity
IBM InfoSphere Information Server: Improper Neutralization of Special Elements used in an OS Command
"IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361.
- 8.8 High severity
IBM InfoSphere Information Server: Cross-Site Request Forgery
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Force ID: 227295.
- 9.8 Critical severity
IBM InfoSphere Information Server: Improper Neutralization of Formula Elements in a CSV File
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."