II
Product
InfoSphere Information Server
191
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 106Low 6
Watch
Add InfoSphere Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-14807 | 6.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable to HTTP header injection Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2026-1014 | 6.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-14810 | 6.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable due to insufficient session expiration Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-14790 | 6.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-1499 | 6.5 | Jun 1 | IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user Affected: 11.7 |
| CVE-2024-51477 | 6.5 | Mar 29 | IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an observable response discrepancy Affected: 11.7 before 11.7.1 |
| CVE-2024-43186 | 6.5 | Mar 29 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions Affected: 11.7 before 11.7.1 |
| CVE-2024-52901 | 6.5 | Dec 12 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation Affected: 11.7 |
| CVE-2023-23472 | 6.5 | Dec 11 | IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks… Affected: 11.7 |
| CVE-2024-40705 | 6.5 | Aug 15 | IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted file uploads Affected: 11.7; 11.7.0.1; 11.7.0.2 |
| CVE-2023-40363 | 6.5 | Nov 18 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings Affected: 11.7 |
| CVE-2023-35898 | 6.5 | Jul 19 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer Affected: 11.7 |
| CVE-2022-22442 | 6.5 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls Affected: 11.7 |
| CVE-2022-40235 | 6.5 | Nov 3 | "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation Affected: 11.7 |
| CVE-2022-41291 | 6.5 | Oct 7 | IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system Affected: 11.7 |
| CVE-2022-36772 | 6.5 | Oct 7 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user Affected: 11.7 |
| CVE-2012-4818 | 6.5 | Sep 29 | IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories Affected: 8.1; 8.5; 8.7 |
| CVE-2022-22441 | 6.5 | Apr 28 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability Affected: 11.7 |
| CVE-2021-38887 | 6.5 | Nov 10 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks… Affected: 11.7 |
| CVE-2020-4286 | 6.5 | May 19 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 11.3 |
| CVE-2018-1917 | 6.5 | Apr 2 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information Affected: 11.3; 11.5; 11.7 |
| CVE-2018-1906 | 6.5 | Apr 2 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request Affected: 11.3; 11.5; 11.7 |
| CVE-2016-5994 | 6.5 | Feb 1 | IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents Affected: 11.5 |
| CVE-2024-22351 | 6.3 | Apr 23 | IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system Affected: 11.7 before 11.7.1 |
| CVE-2024-28798 | 6.1 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting Affected: 11.7 |
| CVE-2023-50303 | 6.1 | Feb 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2022-22427 | 6.1 | Apr 28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2021-29712 | 6.1 | Jul 9 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2020-4727 | 6.1 | Sep 25 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim Affected: 11.7 |
| CVE-2018-1432 | 6.1 | Jun 5 | IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server… Affected: 9.1; 11.3; 11.5; 11.7 |
| CVE-2017-1321 | 6.1 | Jul 12 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting Affected: 9.1; 11.3; 11.5 |
| CVE-2016-5984 | 6.1 | Feb 1 | IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection Affected: 8.7; 9.1; 11.3; 11.5 |
| CVE-2025-36034 | 5.9 | Jun 26 | IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using… Affected: 11.7 |
| CVE-2023-42019 | 5.9 | Dec 1 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation Affected: 11.7.0.0 before 11.7.1.0; 11.7.0.0 before 11.7.1.4 |
| CVE-2018-1454 | 5.9 | Jun 5 | IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict… Affected: 11.3; 11.5; 11.7 |
| CVE-2025-36258 | 5.5 | Mar 25 | IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2024-22352 | 5.5 | Mar 21 | IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user Affected: 11.7 |
| CVE-2023-22878 | 5.5 | May 19 | IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user Affected: 11.7 |
| CVE-2023-24964 | 5.5 | Feb 17 | IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files Affected: 11.7 |
| CVE-2018-1518 | 5.5 | Oct 18 | IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information Affected: 11.7 |
| CVE-2026-1015 | 5.4 | Mar 25 | IBM InfoSphere Information Server is vulnerable to server-side request forgery Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2026-2483 | 5.4 | Mar 25 | IBM InfoSphere Information Server Cross-Site Scripting Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2025-14912 | 5.4 | Mar 25 | IBM InfoSphere Information Server is vulnerable to server-side request forgery Affected: 11.7.0.0 through 11.7.1.6 |
| CVE-2024-40690 | 5.4 | Jul 12 | IBM InfoSphere Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2024-28794 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2023-50964 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |
| CVE-2024-31898 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object… Affected: 11.7 |
| CVE-2024-28797 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting Affected: 11.7 |
| CVE-2023-50952 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF) Affected: 11.7 |
| CVE-2024-28795 | 5.4 | Jun 30 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting Affected: 11.7 |