IBM InfoSphere Information Server Metadata Workbench vulnerabilities

2 CVEs affecting IBM InfoSphere Information Server Metadata Workbench, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1845, published 2019-06-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1845, published 2019-06-17. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to…
• CVE-2014-0933, published 2014-05-16. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.