GCVE - cpe:2.3:a:ibm:infosphere_datastage:11.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_datastage:11.5:*:*:*:*:*:*:*

part: a version: 11.5 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Infosphere Datastage (`e32c30aa-de5c-523c-a7e3-3177056e83ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9000`	vulnerable	2026-06-08 05:08:22.374096	Details available IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.577Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1037564 http://www.securityfocus.com/bid/95324 http://www.ibm.com/support/docview.wss?uid=swg21995257	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8999`	vulnerable	2026-06-08 05:08:22.370308	Details available IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.323Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1037563 http://www.securityfocus.com/bid/95325 http://www.ibm.com/support/docview.wss?uid=swg21995155	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6059`	vulnerable	2026-06-08 05:07:58.719258	Details available IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T01:22:20.536Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94032 http://www.ibm.com/support/docview.wss?uid=swg21991683	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.