IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150.

Published 2020-10-12 · Modified

5.2EPSS 0.007

CVE-2021-29827

IBM InfoSphere Information Server clickjacking

Published 2024-12-18 · Analyzed

5.2EPSS 0.003

CVE-2024-40704

IBM InfoSphere Information Server information disclosure

Published 2024-08-15 · Analyzed

4.9EPSS 0.006

CVE-2023-23475

IBM Infosphere Information Server cross-site scripting

Published 2023-02-08 · Modified

4.6EPSS 0.003

CVE-2024-37533

IBM InfoSphere Information Server information disclosure

Published 2024-07-24 · Modified

4.6EPSS 0.002

CVE-2024-39751

IBM InfoSphere Information Server information disclosure

Published 2024-08-06 · Analyzed

4.3EPSS 0.004

CVE-2024-51460

IBM InfoSphere Information Server information disclosure

Published 2024-12-11 · Analyzed

4.3EPSS 0.003

CVE-2025-1138

IBM Information Server information disclosure

Published 2025-05-15 · Analyzed

4.3EPSS 0.003

CVE-2020-4886

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.

Published 2020-11-13 · Modified

4.0EPSS 0.003

CVE-2025-25046

IBM InfoSphere Information Server information disclosure

Published 2025-04-23 · Analyzed

3.7EPSS 0.002

CVE-2023-35022

IBM InfoSphere Information Server improper authentication

Published 2024-06-30 · Modified

3.3EPSS 0.002

CVE-2023-50955

IBM InfoSphere Information Server information disclosure