Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.3:*:*:*:*:*:*:*

part: a version: 11.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Information Governance Catalog (af484e09-9899-5c9d-bb0c-f95384120978)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4237 vulnerable 2026-06-08 05:13:56.979918 Details available
MEDIUM (5.4)
A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
Published: 2019-07-01T15:05:37.810Z
Updated: 2024-09-17T01:06:03.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1899 vulnerable 2026-06-08 05:11:26.367496 Details available
MEDIUM (4.3)
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.
Published: 2019-03-05T18:00:00.000Z
Updated: 2024-09-16T20:47:56.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1895 vulnerable 2026-06-08 05:11:26.361166 Details available
MEDIUM (5.4)
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.
Published: 2019-02-15T20:00:00.000Z
Updated: 2024-09-17T04:10:32.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1875 vulnerable 2026-06-08 05:11:26.328295 Details available
HIGH (7.4)
IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 151639.
Published: 2019-03-05T18:00:00.000Z
Updated: 2024-09-16T17:18:35.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0280 vulnerable 2026-06-08 05:07:14.843924 Details available
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-08-08T01:00:00.000Z
Updated: 2024-08-05T22:15:23.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.