Infosphere Streams

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-1431 MEDIUM PATCH This Month

IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS IBM Infosphere Streams

NVD

CVSS 3.0

5.4

EPSS

0.2%

CVE-2016-2867 HIGH PATCH This Week

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors. Rated high severity (CVSS 7.0).

IBM Information Disclosure Infosphere Streams Streams

NVD

CVSS 3.0

7.0

EPSS

0.0%

CVE-2017-1431

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

XSS IBM Infosphere Streams

NVD

CVE-2016-2867

EPSS 0% CVSS 7.0

HIGH PATCH This Week

IBM Information Disclosure Infosphere Streams +1

NVD