Improper input validation in IBM Infosphere Information Server
CVE-2013-4066
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm Infosphere_information_server — versions 8.0, 8.1, 8.5
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)