IBM InfoSphere Information Server Business Glossary vulnerabilities

2 CVEs affecting IBM InfoSphere Information Server Business Glossary, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1845, published 2019-06-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1845, published 2019-06-17. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to…
• CVE-2016-0280, published 2016-08-08. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server…