XXE through injection of a payload in the XMP metadata of a JPEG file #836877 Valid Injection and Smuggling – 2020-04-21 – 138 Blind SQL injection at tsftp.informatica.com #1034625 Valid SQL Injection – 2020-11-16 – 68 [careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible #147196 Valid Command and Code Injection – 2016-12-31 – 50 [rev-app.informatica.com] - XXE #105434 Valid Denial of Service – 2016-08-02 – 45 [ipm.informatica.com] Sql injection Oracle #178057 Valid SQL Injection – 2017-01-21 – 28 Cross-site Scripting (XSS) - DOM - iqcard.informatica.com #1004833 Valid Cross-site Scripting – 2020-10-13 – 27 ..; bypass leading to tomcat scripts [Unauthenticated] #1004007 Valid Access Control – 2020-10-13 – 27 [app.informaticaondemand.com] XXE #105753 Valid Denial of Service – 2017-04-08 – 25 Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access #631348 Valid Information Disclosure – 2019-08-06 – 24 [kb.informatica.com] Dom Based xss #156166 Valid Cross-site Scripting – 2019-08-17 – 23 XXE in upload file feature #105787 Valid Denial of Service – 2017-05-10 – 22 Html injection on ██████.informatica.com via search.html?q=1 #1081656 Valid Command and Code Injection – 2021-02-12 – 20 [doc.rt.informaticacloud.com] Arbitrary File Reading via Double URL Encode #232371 Valid File and Path Handling – 2022-07-23 – 20 Reflected XSS #267206 Valid Cross-site Scripting – 2018-09-09 – 17 Store XSS on Informatica University via transcript (informatica.csod.com) #219509 Valid Cross-site Scripting – 2017-09-09 – 17 Improper Sanitization leads to XSS Fire on admin panel #1011888 Valid Cross-site Scripting – 2021-08-03 – 15 [oneclickdrsfdc-test.informatica.com] Tomcat Example Scripts Exposed Unauthenticated #147161 Valid Authentication – 2016-11-02 – 14 [marketplace.informatica.com] - XXE #106797 Valid Command and Code Injection – 2016-12-09 – 14 RXSS in http://procurement-businesscatalog.informatica.com #831803 Valid Cross-site Scripting – 2020-03-27 – 13 CVE-2021-40870 in [███] #1360593 Valid Command and Code Injection – 2021-11-15 – 12 Cross site scripting #1095797 Valid Cross-site Scripting – 2021-05-17 – 12 [marketplace.informatica.com] - Template Injection #299241 Valid Command and Code Injection – 2018-01-02 – 12 [rev-app.informatica.com] - XXE via SAML #106865 Valid Command and Code Injection – 2016-12-09 – 12 [marketplace.informatica.com] - XXE #106802 Valid Command and Code Injection – 2016-12-09 – 12 loing in to marketplace panel on enablement.informatica.com #1081750 Valid Authentication – 2021-01-20 – 11 [marketplace.informatica.com] User email disclosure #230608 Valid Information Disclosure – 2017-11-07 – 11 [informatica.com] Blind SQL Injection #117073 Valid SQL Injection – 2016-04-19 – 11 [marketplace.informatica.com] - Sensitive Data Exposure #270695 Valid Information Disclosure – 2017-12-18 – 10 [informatica.com]- Cross Site scripting #204237 Valid Cross-site Scripting – 2017-10-30 – 10 [ipm.informatica.com]- Broken Authentication #201152 Valid Authentication – 2017-04-11 – 10 [kb.informatica.com] DOM based XSS in the bindBreadCrumb function #189834 Valid Cross-site Scripting – 2017-06-24 – 10 [afocusp.informatica.com] Sql injection afocusp.informatica.com:37777 #178632 Valid SQL Injection – 2017-01-21 – 10 [alpha.informatica.com] Expensive DOMXSS #158749 Valid Cross-site Scripting – 2017-07-08 – 10 [uk.informatica.com] XSS on uk.informatica..com #143323 Valid Cross-site Scripting – 2017-02-28 – 10 [careers.informatica.com] Cross Site Script Vulnerability on informatica #42537 Valid Cross-site Scripting – 2017-05-10 – 10 F5 BIG-IP Cookie potentially reveal BigIP pool name, backend's IP address and port, routed domain. #1211094 Valid Information Disclosure – 2021-06-28 – 9 SSRF on infawiki.informatica.com and infawikitest.informatica.com #327480 Valid Server-Side Request Forgery – 2018-08-16 – 9 [http://www.informatica.com]- info disclosure #311058 Valid Information Disclosure – 2018-02-26 – 9 Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com] #203912 Valid Cross-site Scripting – 2017-04-08 – 9 [product360.informatica.com] Unauthenticated Apache Tomcat 8 Installation #146436 Valid Information Disclosure – 2016-12-08 – 9 Cisco RCE #411270 Valid Command and Code Injection – 2018-09-21 – 8 [marketplace.informatica.com] Persistent XSS through document title #181816 Valid Cross-site Scripting – 2017-02-02 – 8 [parc.informatica.com] Reflected Cross Site Scripting and Open Redirect #178278 Valid Cross-site Scripting – 2017-04-29 – 8 accounts.informatica.com - RCE due to exposed Groovy console #672243 Valid Command and Code Injection – 2019-08-14 – 7 [network.informatica.com] The login form XSS via the referer value #190016 Valid Cross-site Scripting – 2017-05-22 – 7 [kb.informatica.com] Stored XSS #170369 Valid Cross-site Scripting – 2017-04-09 – 7 XXE at Informatica sub-domain #150520 Valid Command and Code Injection – 2018-04-30 – 7 jira discloser information #994612 Valid Information Disclosure – 2022-10-03 – 6 [marketplace.informatica.com] - Stored XSS #277259 Valid Cross-site Scripting – 2017-12-15 – 6 [marketplace.informatica.com]-Reflected XSS #266801 Valid Cross-site Scripting – 2017-12-15 – 6