IBM InfoSphere Streams vulnerabilities

3 CVEs affecting IBM InfoSphere Streams, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1713, published 2019-03-21.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-1431, published 2017-08-10. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2017-1713, published 2019-03-21. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632.
• CVE-2016-2867, published 2016-07-02. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors.