Infosphere Information Server On Cloud vulnerabilities

3 known vulnerabilities in Infosphere Information Server On Cloud from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  InfoSphere Information Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-40689Jul 26, 2024IBM

  IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.

• 9.8 Critical severity

  InfoSphere DataStage: Improper Neutralization of Special Elements used in a Command

  CVE-2022-40752Nov 16, 2022IBMEPSS 1.95%

  IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.

• 7.8 High severity

  InfoSphere Information Server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-22454May 10, 2022IBM

  IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.