Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:on_cloud:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Information Server (7aee4b8e-e285-55dc-b259-1ecc11072663)
Edition*
Language*
Software editionon_cloud
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46174 vulnerable 2026-06-08 06:12:44.308117 IBM InfoSphere Information Server cross-site scripting
MEDIUM (5.4)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269506.
Published: 2023-12-01T21:03:53.593Z
Updated: 2024-08-02T20:37:39.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43021 vulnerable 2026-06-08 06:11:09.787245 IBM InfoSphere Information Server information disclosure
MEDIUM (5.3)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167.
Published: 2023-12-01T20:55:06.148Z
Updated: 2024-11-21T19:00:32.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43015 vulnerable 2026-06-08 06:11:09.780541 IBM InfoSphere Information Server cross-site scripting
MEDIUM (5.4)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.
Published: 2023-12-01T19:39:23.542Z
Updated: 2024-11-21T18:59:42.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42022 vulnerable 2026-06-08 06:11:07.695643 IBM InfoSphere Information Server cross-site scripting
MEDIUM (5.4)
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265938.
Published: 2023-12-01T20:57:15.628Z
Updated: 2024-08-02T19:16:49.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42019 vulnerable 2026-06-08 06:11:07.694865 IBM InfoSphere Information Server information disclosure
MEDIUM (5.9)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
Published: 2023-12-01T21:01:45.589Z
Updated: 2024-08-02T19:16:49.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42009 vulnerable 2026-06-08 06:11:07.678633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40699 vulnerable 2026-06-08 06:11:04.334066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38268 vulnerable 2026-06-08 06:08:17.510906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24959 vulnerable 2026-06-08 05:56:08.280785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23473 vulnerable 2026-06-08 05:56:02.740656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22877 vulnerable 2026-06-08 05:54:27.292073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.