Skip to content

Known vulnerabilities in IBM InfoSphere Information Server

Is your version affected?

CVE Summary Score Published
CVE-2025-1499 IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext… 6.5 Medium Jun 1, 2025
CVE-2025-1138 IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in… 4.3 Medium May 15, 2025
CVE-2025-25046 IBM InfoSphere Information Server 11.7 DataStage Flow Designer  transmits sensitive information via URL or query… 3.7 Low Apr 23, 2025
CVE-2025-25045 IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical… 4.3 Medium Apr 23, 2025
CVE-2024-22351 IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated… 6.3 Medium Apr 23, 2025
CVE-2024-55895 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed… 2.7 Low Mar 29, 2025
CVE-2024-51477 IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to… 4.3 Medium Mar 28, 2025
CVE-2024-7577 IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new… 4.4 Medium Mar 28, 2025
CVE-2024-43186 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is… 5.3 Medium Mar 28, 2025
CVE-2024-51459 IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper… 8.4 High Mar 19, 2025
CVE-2024-40706 IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could… 5.3 Medium Jan 24, 2025
CVE-2024-52363 IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system 6.5 Medium Jan 17, 2025
CVE-2021-29827 IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim 5.2 Medium Dec 18, 2024
CVE-2024-52901 IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to… 6.5 Medium Dec 12, 2024
CVE-2024-51460 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed… 4.3 Medium Dec 11, 2024
CVE-2023-23472 IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to… 3.1 Low Dec 11, 2024
CVE-2024-40705 IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to… 6.5 Medium Aug 15, 2024
CVE-2024-40704 IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication… 4.9 Medium Aug 15, 2024
CVE-2024-39751 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed… 4.3 Medium Aug 6, 2024
CVE-2024-40689 IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection 6.0 Medium Jul 26, 2024
CVE-2024-37533 IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to… 2.4 Low Jul 24, 2024
CVE-2023-50964 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting 5.4 Medium Jun 30, 2024
CVE-2024-28794 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting 5.4 Medium Jun 30, 2024
CVE-2023-50953 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed… 5.4 Medium Jun 30, 2024
CVE-2023-50952 IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 30, 2024

Other IBM products