IBM Informix Open Admin Tool vulnerabilities

2 CVEs affecting IBM Informix Open Admin Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1092, published 2017-05-22.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-1092, published 2017-05-22. Critical severity, CVSS 9.8. EPSS: 75.8% chance of exploitation in the next 30 days. IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.
• CVE-2013-0492, published 2013-08-09. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.