II
Product
InfoSphere Information Server
191
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 106Low 6
Watch
Add InfoSphere Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40689 | 9.8 | Jul 26 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7 |
| CVE-2023-32336 | 9.8 | May 22 | IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service Affected: 11.7 |
| CVE-2022-47984 | 9.8 | May 19 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7 |
| CVE-2022-40752 | 9.8 | Nov 16 | IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements Affected: 11.7 |
| CVE-2022-22425 | 9.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection Affected: 11.7 |
| CVE-2022-31768 | 9.8 | Jun 6 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7 |
| CVE-2020-27583 | 9.8 | Jan 26 | IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code Affected: 8.5 |
| CVE-2025-12531 | 9.1 | Nov 3 | IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2022-40747 | 9.1 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.7 |
| CVE-2021-38948 | 9.1 | Nov 2 | IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.7 |
| CVE-2018-1727 | 9.1 | Feb 15 | IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 9.1; 11.3; 11.5; 11.7 |
| CVE-2017-1383 | 9.1 | Aug 2 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 9.1; 11.3; 11.5; 11.5 |
| CVE-2025-36245 | 8.8 | Sep 29 | IBM InfoSphere Information Server command execution Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2024-31902 | 8.8 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7 |
| CVE-2023-38268 | 8.8 | Dec 1 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-23473 | 8.8 | Aug 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-22877 | 8.8 | Aug 28 | IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2022-30608 | 8.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7 |
| CVE-2021-29888 | 8.8 | Nov 2 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 11.7 |
| CVE-2021-29730 | 8.8 | Jul 9 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7 |
| CVE-2020-4305 | 8.8 | Jul 9 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data Affected: 11.7.0.0 through 11.7.1.1; 11.3.0; 11.5.0 |
| CVE-2018-1701 | 8.5 | Feb 15 | IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the… Affected: 11.7 |
| CVE-2019-4185 | 8.3 | Jun 6 | IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component Affected: 11.7.1 |
| CVE-2013-0507 | 8.1 | Feb 5 | IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability Affected: 8.1; 8.5; 8.7; 9.1 |
| CVE-2017-1467 | 8.1 | Aug 2 | A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access Affected: 9.1; 11.3; 11.5; 11.5 |
| CVE-2016-6059 | 8.1 | Feb 1 | IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 11.3; 11.3.1; 11.5 |
| CVE-2025-33003 | 7.8 | Oct 31 | IBM InfoSphere Information Server is vulnerable to privilege escalation Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2024-51459 | 7.8 | Mar 19 | IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper handling of permissions Affected: 11.7 before 11.7.1.136 |
| CVE-2022-35717 | 7.8 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request Affected: 11.7 |
| CVE-2017-1350 | 7.8 | Jun 5 | IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls Affected: 9.1; 11.3; 11.5; 11.7 |
| CVE-2017-1469 | 7.8 | Aug 14 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories Affected: 9.1; 11.3; 11.5 |
| CVE-2017-1468 | 7.8 | Aug 2 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories Affected: 9.1; 11.3; 11.5; 11.5 |
| CVE-2025-0966 | 7.6 | Jun 25 | IBM InfoSphere Information Server 11.7 vulnerable to SQL injection Affected: 11.7 before 11.7.1 |
| CVE-2026-9836 | 7.5 | Jun 30 | IBM DataStage Flow Designer application is affected by an information disclosure vulnerability Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-14974 | 7.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2026-1567 | 7.5 | Mar 3 | IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-3221 | 7.5 | Jun 21 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources Affected: 11.7 through 11.7.1.6 |
| CVE-2024-7577 | 7.5 | Mar 29 | IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product Affected: 11.7 before 11.7.1 |
| CVE-2024-52363 | 7.5 | Jan 17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system Affected: 11.7 |
| CVE-2023-40699 | 7.5 | Dec 1 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-24959 | 7.5 | Aug 28 | IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2023-30441 | 7.5 | Apr 29 | IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and… Affected: 11.7 |
| CVE-2023-24960 | 7.5 | Feb 17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system Affected: 11.7 |
| CVE-2022-35715 | 7.5 | Aug 10 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace Affected: 11.7 |
| CVE-2021-29875 | 7.5 | Nov 2 | IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third party domain access vulnerability Affected: 11.7 |
| CVE-2021-29737 | 7.5 | Nov 2 | IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate Affected: 11.7 |
| CVE-2021-29747 | 7.5 | May 17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a vulnerability in the authentication mechanism Affected: 11.7 |
| CVE-2020-4347 | 7.3 | Apr 16 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere… Affected: 11.3; 11.5; 11.7 |
| CVE-2018-1845 | 7.1 | Jun 17 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 11.3; 11.5; 11.7 |
| CVE-2025-14807 | 6.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable to HTTP header injection Affected: 11.7.0.0 through 11.7.1.6 |