CVE-2025-3629

Medium CVSS: 4.3

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6

could allow an authenticated user to delete another user's comments due to improper ownership management.

Vendor

Ibm

Product

Infosphere Information Server

CWE

CWE-282

Yayın Tarihi

2025-06-21 13:15:21

Güncelleme

2025-07-08 14:26:41

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-282 Infosphere Information Server MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7235496

Benzer Kayıtlar

Medium

CVE-2025-13044

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar…

Medium

CVE-2026-1243

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authe…

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…