VendorsIBMinfosphere_information_serverall versions
Vulnerabilities

IBM Infosphere Information Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

189CVEs
CVE-2025-12832
IBM InfoSphere Information Server Server-Side Request Forgery
Published 2025-12-08 · Analyzed
4.6EPSS 0.002
CVE-2013-4059
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.
Published 2014-03-16 · Modified
4.3EPSS 0.013
CVE-2009-4239
Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2009-12-09 · Modified
4.3EPSS 0.013
CVE-2013-4066
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.
Published 2013-10-02 · Modified
4.3EPSS 0.012
CVE-2014-3071
Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection.
Published 2014-07-26 · Modified
4.3EPSS 0.012
CVE-2013-0502
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.
Published 2013-04-01 · Modified
4.3EPSS 0.011
CVE-2012-4819
Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-01-31 · Modified
4.3EPSS 0.009
CVE-2012-0203
Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-01-31 · Modified
4.3EPSS 0.009
CVE-2024-39751
IBM InfoSphere Information Server information disclosure
Published 2024-08-06 · Analyzed
4.3EPSS 0.004
CVE-2024-51460
IBM InfoSphere Information Server information disclosure
Published 2024-12-11 · Analyzed
4.3EPSS 0.003
CVE-2025-25045
IBM InfoSphere Information Server information disclosure
Published 2025-04-23 · Analyzed
4.3EPSS 0.003
CVE-2026-2484
IBM InfoSphere Information Server Information Disclosure
Published 2026-03-25 · Analyzed
4.3EPSS 0.003
CVE-2025-1138
IBM Information Server information disclosure
Published 2025-05-15 · Analyzed
4.3EPSS 0.003
CVE-2026-1262
IBM InfoSphere Information Server Information Disclosure
Published 2026-03-25 · Analyzed
4.3EPSS 0.002
CVE-2025-3629
IBM InfoSphere Information Server file manipulation
Published 2025-06-21 · Analyzed
4.3EPSS 0.002
CVE-2025-36422
IBM InfoSphere Information Server is vulnerable to cross-site request forgery
Published 2026-03-25 · Analyzed
4.3EPSS 0.001
CVE-2012-0702
Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privileges via unspecified vectors.
Published 2013-01-31 · Modified
4.0EPSS 0.009
CVE-2020-4886
IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.
Published 2020-11-13 · Modified
4.0EPSS 0.003
CVE-2025-25046
IBM InfoSphere Information Server information disclosure
Published 2025-04-23 · Analyzed
3.7EPSS 0.002
CVE-2015-7490
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.
Published 2016-03-03 · Modified
3.5EPSS 0.011
CVE-2013-3034
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.
Published 2013-08-16 · Modified
3.5EPSS 0.009
CVE-2013-0585
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to the (1) web console and (2) repository management user interfaces.
Published 2013-08-16 · Modified
3.5EPSS 0.008
CVE-2023-35022
IBM InfoSphere Information Server improper authentication
Published 2024-06-30 · Modified
3.3EPSS 0.002
CVE-2025-14808
IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
Published 2026-03-25 · Analyzed
3.1EPSS 0.002
CVE-2023-50955
IBM InfoSphere Information Server information disclosure
Published 2024-02-21 · Analyzed
2.7EPSS 0.006
CVE-2013-5440
IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation.
Published 2013-12-18 · Modified
2.1EPSS 0.003
CVE-2012-4832
Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published 2013-01-31 · Modified
1.9EPSS 0.005
CVE-2015-1901
The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.
Published 2015-06-28 · Modified
1.9EPSS 0.004
CVE-2012-0700
The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors.
Published 2013-01-31 · Modified
1.9EPSS 0.003
← Prev5 / 5