DeutschShown in its original language — a full translation is planned for a future version.
IBM InfoSphere Information Server: Mehrere Schwachstellen
view advisory published 2017-08-01
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um einen Denial of Service Angriff durchzuführen, seine Privilegien zu erweitern oder vertrauliche Daten einzusehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-1495US | medium4.9 | — | ||
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credenti… | ||||
| CVE-2017-1468US | high7.8 | — | ||
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 1… | ||||
| CVE-2017-1467US | high8.1 | — | ||
A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466. | ||||
| CVE-2017-1383US | critical9.1 | — | ||
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this v… | ||||
02
references
External citations — patches, advisories, analysis.
- IBM Security Bulletin 2005803 vom 2017-08-01external
- IBM Security Bulletin 2006063 vom 2017-08-01external
- IBM Security Bulletin 2006067 vom 2017-08-01external
- IBM Security Bulletin 2006068 vom 2017-08-01external
- WID-SEC-W-2023-3162 - CSAF Versionself
- WID-SEC-2023-3162 - Portal Versionself
- IBM Security Bulletin 564853 vom 2023-12-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan