3 results (0.001 seconds)

CVSS: 9.1EPSS: 0%CPEs: 5EXPL: 1

02 Aug 2017 — IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155. Las versiones 9.1, 11.3 y 11.5 de IBM InfoSphere Information Server son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer infor... • https://packetstorm.news/files/id/144187 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 1

02 Aug 2017 — A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466. Una vulnerabilidad de la seguridad en la capa de red en InfoSphere Information Server 9.1, 11.3 y 11.5 permite que se escalen privilegios o un acceso no autorizado. IBM X-Force ID: 128466. IBM Infosphere Information Server / Datastage versions 9.1, 11.3, and 11.5 (including Cloud version 11.5) suffer from bypass, XML external entity inje... • https://packetstorm.news/files/id/144187 •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 1

02 Aug 2017 — IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467. IBM InfoSphere Information Server 9.1, 11.3 y 11.5 podría permitir que un usuario local obtenga privilegios elevados al ubicar archivos arbitrarios en los directorios de instalación. IBM X-force ID: 128467. IBM Infosphere Information Server / Datastage versions 9.1, 11.3, and 11.5 (including Cloud version 11.5) suffer from ... • https://packetstorm.news/files/id/144187 •