TI-2018-01507 Aliases CVE-2018-1701 GHSA-44w3-wrmw-j9hx

IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized…

LOW 39Published 2019-02-15 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA.

Summary

IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970.

Why it matters now

EPSS 0.01242 69th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
IBM	InfoSphere Information Server	11.7	—	No fix listed	CNA

InfoSphere Information Server VendorIBM Affected 11.7 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:ibm:infosphere_information_server:11.7:::::::*	11.7	Vulnerable	IBM
cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.7:::::::*	11.7	Vulnerable	IBM

cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:* Versions 11.7 Vulnerable ·IBM
cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.7:*:*:*:*:*:*:* Versions 11.7 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-1701
2026-10-03 Alias added: GHSA-44w3-wrmw-j9hx

References

Patch 1

https://www.ibm.com/support/docview.wss?uid=ibm10730555

TI-2020-16712 IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted… CVSS 3.1CRITICAL 9.8
TI-2022-19379 Command injection in IBM InfoSphere DataStage CVSS 3.1CRITICAL 9.8
TI-2022-06725 CSV injection in IBM InfoSphere Information Server CVSS 3.1CRITICAL 9.8
TI-2022-19375 XML external entity injection in IBM InfoSphere Information Server CVSS 3.1CRITICAL 9.1
TI-2022-23773 IBM InfoSphere Information Server SQL injection CVSS 3.1CRITICAL 9.8
TI-2009-04024 Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in… CVSS 2.0HIGH 10.0

See all 188 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences