Medium severity · published Jun 6, 2019
CVE-2019-4257
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability
4.3
CVSS
1%
EPSS
No
On KEV
Description
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Infosphere Information Analyzer · Ibm
11.5; 11.7 · source: NVD
II
Infosphere Information Governance Catalog · Ibm
11.5; 11.7 · source: NVD
II
Infosphere Information Server ON Cloud · Ibm
11.5; 11.7 · source: NVD