Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

189 records in Infosphere Information Server · all components

Priority MEDIUM 53

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01924 Published 2022-11-16 No fix listed CWE-77
Priority MEDIUM 51

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01304 Published 2022-11-03 No fix listed CWE-1236
Priority MEDIUM 49

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00679 Published 2023-05-19 No fix listed CWE-89
Priority MEDIUM 46

IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.014 Published 2023-05-22 No fix listed CWE-502
Priority MEDIUM 45

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04542 Published 2020-07-09 No fix listed CWE-502
Priority MEDIUM 44

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02463 Published 2019-02-15 No fix listed CWE-611
Priority MEDIUM 44

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02718 Published 2017-08-02 No fix listed CWE-611
Priority MEDIUM 43

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00538 Published 2024-07-26 No fix listed CWE-89
Priority MEDIUM 43

IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02037 Published 2021-11-02 No fix listed CWE-91
Priority MEDIUM 42

IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01406 Published 2023-02-17 No fix listed CWE-22
Priority MEDIUM 41

IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01078 Published 2023-12-01 No fix listed CWE-20
Priority MEDIUM 41

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00664 Published 2023-08-28 No fix listed CWE-1236
Priority MEDIUM 40

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00457 Published 2025-09-29 No fix listed CWE-78
TI-2023-14282 CVE-2023-30441 · GHSA-2v8w-cv2x-fj9v

IBM Java information disclosure

Priority MEDIUM 40

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2023-04-29 Fixed CWE-327
Priority MEDIUM 40

"IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2022-11-03 No fix listed CWE-352
Priority MEDIUM 40

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2021-07-09 No fix listed CWE-89
Priority LOW 39

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-06-21 No fix listed CWE-770
Priority LOW 39

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0049 Published 2021-11-02 No fix listed CWE-352
Load more
Open these records in search →