IBM InfoSphere Information Server SQL Injection Vulnerability (CNVD-2023-41889)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines (IBM). The platform can be used to integrate data information obtained from various sources. An SQL injection vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems from the application’s lack of validation of externally entered SQL statements. An attacker could exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.