Lucene search
K

8 matches found

Cvelist
Cvelist
added 2026/03/25 8:41 p.m.23 views

CVE-2026-1015 IBM InfoSphere Information Server is vulnerable to server-side request forgery

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS0.00012EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 8:40 p.m.8 views

CVE-2026-1014

IBM InfoSphere Information Server is vulnerable to exposure of sensitive information via JSON server response manipulation (CVE-2026-1014). Affects InfoSphere Information Server 11.7.0.0 to 11.7.1.6. Root cause: cleartext transmission of sensitive information (CWE-319) via JSON responses. CVSS Ba...

6.5CVSS5.8AI score0.00011EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/25 8:40 p.m.23 views

CVE-2026-1014 IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation...

6.5CVSS0.00011EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 8:6 p.m.19 views

CVE-2025-14790 IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials...

6.5CVSS0.0004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.2 views

PT-2026-28111

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS5.8AI score0.00036EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/24 9:4 p.m.4 views

Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2026-2483)

Summary A cross-site scripting vulnerability was addressed in IBM InfoSphere Information Server. Vulnerability Details CVEID:CVE-2026-2483 DESCRIPTION: InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We...

5.4CVSS5.4AI score0.00012EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/10/31 1:4 p.m.8 views

CVE-2025-33003

CVE-2025-33003 affects IBM InfoSphere Information Server versions 11.7.0.0 to 11.7.1.6. The Red Hat and IBM bulletins confirm a privilege-escalation issue where a non-root user could gain higher privileges within a container due to execution with unnecessary privileges. Exploitation details are n...

7.8CVSS6.5AI score0.00011EPSS
Exploits0References1Affected Software1
NCSC
NCSC
added 2025/09/30 8:31 a.m.6 views

Vulnerability fixed in IBM InfoSphere

IBM has fixed a vulnerability in InfoSphere Versions 11.7.0.0 to 11.7.1.6 The vulnerability is in how input is validated in affected versions of InfoSphere. Authenticated users can exploit this vulnerability to execute arbitrary commands with elevated privileges. This could lead to unauthorized...

8.8CVSS7.3AI score0.00037EPSS
Exploits0References1
Rows per page
Query Builder