9.1
Critique
CVE-2022-40747 "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing…
Description
"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| IBM InfoSphere Information Server | 11.7 | Pas de correctif indiqué |
Autres CVE de IBM InfoSphere Information Server
Les 8 CVE de IBM InfoSphere Information Server →
CVE-2022-22425
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection
9.8
Critique
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with…
6.5
Moyenne
CVE-2022-30608
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to…
8.8
Élevée
CVE-2022-30615
"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting
5.4
Moyenne