9.8
Critique
CVE-2022-22425 "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection
Description
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| IBM InfoSphere Information Server | 11.7 | Pas de correctif indiqué |
Autres CVE de IBM InfoSphere Information Server
Les 8 CVE de IBM InfoSphere Information Server →
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with…
6.5
Moyenne
CVE-2022-30608
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to…
8.8
Élevée
CVE-2022-30615
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2022-35642
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Moyenne