| CVE-2026-9836 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability
|
3.5
Low
|
Jun 30, 2026 |
| CVE-2025-14807 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper…
|
6.5
Medium
|
Mar 25, 2026 |
| CVE-2026-1015 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF)
|
5.4
Medium
|
Mar 25, 2026 |
| CVE-2026-1014 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via…
|
6.5
Medium
|
Mar 25, 2026 |
| CVE-2026-2483 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 25, 2026 |
| CVE-2026-2484 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability…
|
4.3
Medium
|
Mar 25, 2026 |
| CVE-2025-36422 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to…
|
4.3
Medium
|
Mar 25, 2026 |
| CVE-2025-36258 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive…
|
7.1
High
|
Mar 25, 2026 |
| CVE-2026-2485 |
IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting
|
4.8
Medium
|
Mar 25, 2026 |
| CVE-2025-14974 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference (IDOR)
|
5.7
Medium
|
Mar 25, 2026 |
| CVE-2026-1262 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability
|
4.3
Medium
|
Mar 25, 2026 |
| CVE-2025-14912 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF)
|
5.4
Medium
|
Mar 25, 2026 |
| CVE-2025-14810 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been…
|
6.3
Medium
|
Mar 25, 2026 |
| CVE-2025-14808 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from…
|
3.1
Low
|
Mar 25, 2026 |
| CVE-2025-14790 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information…
|
6.5
Medium
|
Mar 25, 2026 |
| CVE-2026-1567 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere…
|
7.1
High
|
Mar 3, 2026 |
| CVE-2026-1265 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log…
|
4.3
Medium
|
Mar 3, 2026 |
| CVE-2025-12832 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF)
|
4.6
Medium
|
Dec 8, 2025 |
| CVE-2025-12531 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE)…
|
7.1
High
|
Nov 3, 2025 |
| CVE-2025-33003 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher…
|
7.8
High
|
Oct 31, 2025 |
| CVE-2025-36245 |
IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary…
|
8.8
High
|
Sep 29, 2025 |
| CVE-2025-36034 |
IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in…
|
5.3
Medium
|
Jun 26, 2025 |
| CVE-2025-0966 |
IBM InfoSphere Information Server SQL injection
|
7.6
High
|
Jun 25, 2025 |
| CVE-2025-3629 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another…
|
4.3
Medium
|
Jun 21, 2025 |
| CVE-2025-3221 |
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service…
|
7.5
High
|
Jun 21, 2025 |