5.4
Medium
CVE-2022-30615 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
Description
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IBM InfoSphere Information Server | 11.7 | No fix stated |
Other CVEs of IBM InfoSphere Information Server
The 8 CVEs of IBM InfoSphere Information Server →
CVE-2022-22425
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection
9.8
Critical
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with…
6.5
Medium
CVE-2022-30608
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to…
8.8
High
CVE-2022-35642
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Medium