9.8
Critical
CVE-2022-22425 "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection
Description
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IBM InfoSphere Information Server | 11.7 | No fix stated |
Other CVEs of IBM InfoSphere Information Server
The 8 CVEs of IBM InfoSphere Information Server →
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with…
6.5
Medium
CVE-2022-30608
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to…
8.8
High
CVE-2022-30615
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Medium
CVE-2022-35642
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Medium