CVE-2019-4237

A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.7:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.7:*:*:*:*:*:*:*

Information

Published : 2019-07-01 08:15

Updated : 2022-12-02 11:44


NVD link : CVE-2019-4237

Mitre link : CVE-2019-4237


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

ibm

  • infosphere_information_server_on_cloud
  • infosphere_information_server
  • infosphere_information_governance_catalog