PT-2025-28796 · Ibm · Infosphere Data Replication Vsam For Z/Os Remote Source

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Data Replication VSAM for z/OS Remote Source version 11.4 Description: IBM InfoSphere Data Replication VSAM for z/OS Remote Source version 11.4 is susceptible to a denial-of-service condition. A remote user can trigger this iss...

The vulnerability of the IBM InfoSphere Information Server software platform, related to the lack of protective measures for SQL query structures, allows attackers to gain access to read, modify, and delete data.

The vulnerability of the IBM InfoSphere Information Server software platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker to gain read, modify, and delete access to data...

CVE-2025-36034

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

IBM InfoSphere 11.7.0.x < 11.7.1.6 DoS (7235496)

The version of IBM InfoSphere Information Server installed on the remote host is 11.7.0 prior to 11.7.1.6. It is, therefore, affected by a denial of service vulnerability, as referenced in the 7235496 advisory. - IBM InfoSphere Information Server could allow a remote attacker to cause a denial of...

CVE-2025-36034

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to SQL injection (CVE-2025-0966)

Summary A SQL injection vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-0966 DESCRIPTION: IBM InfoSphere Information Server vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the...

Security Bulletin: IBM InfoSphere DataStage Flow Designer is vulnerable due to cleartext transmission of sensitive information (CVE-2025-36034)

Summary A disclosure of sensitive information vulnerability in InfoSphere DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2025-36034 DESCRIPTION: IBM InfoSphere DataStage Flow Designer discloses sensitive user information in API requests in clear text that could be...

CVE-2025-36034 IBM InfoSphere DataStage Flow Designer information disclosure

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...

CVE-2025-36034

CVE-2025-36034 affects IBM InfoSphere DataStage Flow Designer within IBM InfoSphere Information Server 11.7. The issue causes cleartext transmission of sensitive user information in API requests, enabling potential disclosure via man-in-the-middle. The IBM security bulletin cites CWE-319 and list...

CVE-2025-36034 IBM InfoSphere DataStage Flow Designer information disclosure

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...

The vulnerability of the IBM InfoSphere Information Server software platform, related to the unlimited distribution of resources, allows a hacker to cause service failures.

The vulnerability of the IBM InfoSphere Information Server software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2025-26982 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue discloses sensitive user information in API requests in clear text, which could be intercepted using man-in-the-middle techniques. Recommendations: For IBM InfoSphere...

The vulnerability of the IBM InfoSphere Information Server software platform’s data integration module lies in the incorrect limitation of the path name for the restricted access catalog, allowing attackers to read arbitrary files.

The vulnerability of the IBM InfoSphere Information Server software integration platform is related to incorrect restrictions on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files by sending a specially crafted...

The vulnerability of the IBM InfoSphere Information Server software platform, related to deficiencies in access control, allows a perpetrator to gain access to delete data.

The vulnerability of the IBM InfoSphere Information Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access and delete data...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 is affected by CVE-2025-0966 due to an SQL injection vulnerability (CWE-89). A remote attacker could send crafted SQL statements to view, add, modify, or delete data in the back-end database. The IBM security bulletin indicates affected product/version: Info...

CVE-2025-0966 IBM InfoSphere Information Server SQL injection

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...