InfoSphere Information Server vulnerabilities | LiveThreat CVE Feed

Product

InfoSphere Information Server

by IBM · last CVE Jun 30, 2026

191

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities191 In the news0 Timeline

Severity mix

Critical 12High 37Medium 106Low 6

Severity

All severities191 Critical12 High37 Medium106 Low6

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add InfoSphere Information Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-40689	9.8	1%	Jul 26	IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7
CVE-2023-32336	9.8	1%	May 22	IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service Affected: 11.7
CVE-2022-47984	9.8	1%	May 19	IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7
CVE-2022-40752	9.8	2%	Nov 16	IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements Affected: 11.7
CVE-2022-22425	9.8	1%	Nov 3	"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection Affected: 11.7
CVE-2022-31768	9.8	1%	Jun 6	IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection Affected: 11.7
CVE-2020-27583	9.8	4%	Jan 26	IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code Affected: 8.5
CVE-2025-12531	9.1	1%	Nov 3	IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data Affected: 11.7 through 11.7.1.6
CVE-2022-40747	9.1	1%	Nov 3	"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.7
CVE-2021-38948	9.1	2%	Nov 2	IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.7
CVE-2018-1727	9.1	2%	Feb 15	IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 9.1; 11.3; 11.5; 11.7
CVE-2017-1383	9.1	3%	Aug 2	IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 9.1; 11.3; 11.5; 11.5