# IBM InfoSphere Information Server.

Every CVE that names IBM InfoSphere Information Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM DataStage Flow Designer application is affected by an information disclosure vulnerability](https://agentprime.io/advisories/CVE-2026-9836.md)
  `CVE-2026-9836` · CVE record: IBM InfoSphere Information Server · CVSS 3.5 Low · Not analysed yet · Published 30 Jun 2026 · Tags: Information disclosure
- [IBM InfoSphere Information Server is vulnerable to HTTP header injection](https://agentprime.io/advisories/CVE-2025-14807.md)
  `CVE-2025-14807` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-644
- [IBM InfoSphere Information Server is vulnerable to server-side request forgery](https://agentprime.io/advisories/CVE-2026-1015.md)
  `CVE-2026-1015` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information](https://agentprime.io/advisories/CVE-2026-1014.md)
  `CVE-2026-1014` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM InfoSphere Information Server Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-2483.md)
  `CVE-2026-2483` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server Information Disclosure](https://agentprime.io/advisories/CVE-2026-2484.md)
  `CVE-2026-2484` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Information disclosure
- [IBM InfoSphere Information Server is vulnerable to cross-site request forgery](https://agentprime.io/advisories/CVE-2025-36422.md)
  `CVE-2025-36422` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password](https://agentprime.io/advisories/CVE-2025-36258.md)
  `CVE-2025-36258` · CVE record: IBM InfoSphere Information Server · CVSS 7.1 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-256
- [IBM InfoSphere Information Server Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-2485.md)
  `CVE-2026-2485` · CVE record: IBM InfoSphere Information Server · CVSS 4.8 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference](https://agentprime.io/advisories/CVE-2025-14974.md)
  `CVE-2025-14974` · CVE record: IBM InfoSphere Information Server · CVSS 5.7 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Broken access control
- [IBM InfoSphere Information Server Information Disclosure](https://agentprime.io/advisories/CVE-2026-1262.md)
  `CVE-2026-1262` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Information disclosure
- [IBM InfoSphere Information Server is vulnerable to server-side request forgery](https://agentprime.io/advisories/CVE-2025-14912.md)
  `CVE-2025-14912` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [IBM InfoSphere Information Server is vulnerable due to insufficient session expiration](https://agentprime.io/advisories/CVE-2025-14810.md)
  `CVE-2025-14810` · CVE record: IBM InfoSphere Information Server · CVSS 6.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Authentication bypass
- [IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information](https://agentprime.io/advisories/CVE-2025-14808.md)
  `CVE-2025-14808` · CVE record: IBM InfoSphere Information Server · CVSS 3.1 Low · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-598
- [IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information](https://agentprime.io/advisories/CVE-2025-14790.md)
  `CVE-2025-14790` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Hard-coded credentials
- [IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability](https://agentprime.io/advisories/CVE-2026-1567.md)
  `CVE-2026-1567` · CVE record: IBM InfoSphere Information Server · CVSS 7.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: XML external entities (XXE)
- [IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file](https://agentprime.io/advisories/CVE-2026-1265.md)
  `CVE-2026-1265` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Information disclosure
- [IBM InfoSphere Information Server Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-12832.md)
  `CVE-2025-12832` · CVE record: IBM InfoSphere Information Server · CVSS 4.6 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Server-side request forgery (SSRF)
- [IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability](https://agentprime.io/advisories/CVE-2025-12531.md)
  `CVE-2025-12531` · CVE record: IBM InfoSphere Information Server · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2025 · Tags: XML external entities (XXE)
- [IBM InfoSphere Information Server is vulnerable to privilege escalation](https://agentprime.io/advisories/CVE-2025-33003.md)
  `CVE-2025-33003` · CVE record: IBM InfoSphere Information Server · CVSS 7.8 High · Not analysed yet · Published 31 Oct 2025 · Tags: Privilege escalation
- [IBM InfoSphere Information Server command execution](https://agentprime.io/advisories/CVE-2025-36245.md)
  `CVE-2025-36245` · CVE record: IBM InfoSphere Information Server · CVSS 8.8 High · Not analysed yet · Published 29 Sept 2025 · Tags: Command injection
- [IBM InfoSphere DataStage Flow Designer information disclosure](https://agentprime.io/advisories/CVE-2025-36034.md)
  `CVE-2025-36034` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Weak cryptography or TLS
- [IBM InfoSphere Information Server SQL injection](https://agentprime.io/advisories/CVE-2025-0966.md)
  `CVE-2025-0966` · CVE record: IBM InfoSphere Information Server · CVSS 7.6 High · Not analysed yet · Published 25 Jun 2025 · Tags: SQL injection
- [IBM InfoSphere Information Server file manipulation](https://agentprime.io/advisories/CVE-2025-3629.md)
  `CVE-2025-3629` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 21 Jun 2025 · Tags: CWE-282
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2025-3221.md)
  `CVE-2025-3221` · CVE record: IBM InfoSphere Information Server · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2025 · Tags: Denial of service
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2025-1499.md)
  `CVE-2025-1499` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2025 · Tags: Information disclosure
- [IBM Information Server information disclosure](https://agentprime.io/advisories/CVE-2025-1138.md)
  `CVE-2025-1138` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 15 May 2025 · Tags: CWE-548
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2025-25046.md)
  `CVE-2025-25046` · CVE record: IBM InfoSphere Information Server · CVSS 3.7 Low · Not analysed yet · Published 23 Apr 2025 · Tags: Weak cryptography or TLS
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2025-25045.md)
  `CVE-2025-25045` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 23 Apr 2025 · Tags: Information disclosure
- [IBM InfoSphere Information Server session fixation](https://agentprime.io/advisories/CVE-2024-22351.md)
  `CVE-2024-22351` · CVE record: IBM InfoSphere Information Server · CVSS 6.3 Medium · Not analysed yet · Published 23 Apr 2025 · Tags: Authentication bypass
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-55895.md)
  `CVE-2024-55895` · CVE record: IBM InfoSphere Information Server · CVSS 2.7 Low · Not analysed yet · Published 29 Mar 2025 · Tags: Information disclosure
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-51477.md)
  `CVE-2024-51477` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: Information disclosure
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-7577.md)
  `CVE-2024-7577` · CVE record: IBM InfoSphere Information Server · CVSS 4.4 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: Information disclosure
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-43186.md)
  `CVE-2024-43186` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-256
- [IBM InfoSphere Server Information command execution](https://agentprime.io/advisories/CVE-2024-51459.md)
  `CVE-2024-51459` · CVE record: IBM InfoSphere Information Server · CVSS 8.4 High · Not analysed yet · Published 19 Mar 2025 · Tags: CWE-280
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-40706.md)
  `CVE-2024-40706` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: Information disclosure
- [IBM InfoSphere Information Server directory traversal](https://agentprime.io/advisories/CVE-2024-52363.md)
  `CVE-2024-52363` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 17 Jan 2025 · Tags: Path traversal
- [IBM InfoSphere Information Server clickjacking](https://agentprime.io/advisories/CVE-2021-29827.md)
  `CVE-2021-29827` · CVE record: IBM InfoSphere Information Server · CVSS 5.2 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-1021
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2024-52901.md)
  `CVE-2024-52901` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1284
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-51460.md)
  `CVE-2024-51460` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-23472.md)
  `CVE-2023-23472` · CVE record: IBM InfoSphere Information Server · CVSS 3.1 Low · Not analysed yet · Published 11 Dec 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2024-40705.md)
  `CVE-2024-40705` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-405
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-40704.md)
  `CVE-2024-40704` · CVE record: IBM InfoSphere Information Server · CVSS 4.9 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: Hard-coded credentials
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-39751.md)
  `CVE-2024-39751` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server SQL injection](https://agentprime.io/advisories/CVE-2024-40689.md)
  `CVE-2024-40689` · CVE record: IBM InfoSphere Information Server · CVSS 6.0 Medium · Not analysed yet · Published 26 Jul 2024 · Tags: SQL injection
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-37533.md)
  `CVE-2024-37533` · CVE record: IBM InfoSphere Information Server · CVSS 2.4 Low · Not analysed yet · Published 24 Jul 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-50964.md)
  `CVE-2023-50964` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-28794.md)
  `CVE-2024-28794` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-50953.md)
  `CVE-2023-50953` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server server-side request forgery](https://agentprime.io/advisories/CVE-2023-50952.md)
  `CVE-2023-50952` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Server-side request forgery (SSRF)
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-28797.md)
  `CVE-2024-28797` · CVE record: IBM InfoSphere Information Server · CVSS 6.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server data modification](https://agentprime.io/advisories/CVE-2024-31898.md)
  `CVE-2024-31898` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Broken access control
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2023-50954.md)
  `CVE-2023-50954` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: CWE-598
- [IBM InfoSphere Information Server cross-site request forgery](https://agentprime.io/advisories/CVE-2024-31902.md)
  `CVE-2024-31902` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site request forgery (CSRF)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-35119.md)
  `CVE-2024-35119` · CVE record: IBM InfoSphere Information Server · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-28798.md)
  `CVE-2024-28798` · CVE record: IBM InfoSphere Information Server · CVSS 7.2 High · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server improper authentication](https://agentprime.io/advisories/CVE-2023-35022.md)
  `CVE-2023-35022` · CVE record: IBM InfoSphere Information Server · CVSS 3.3 Low · Not analysed yet · Published 30 Jun 2024 · Tags: Broken access control
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-28795.md)
  `CVE-2024-28795` · CVE record: IBM InfoSphere Information Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM InfoSphere Information Server information disclosure](https://agentprime.io/advisories/CVE-2024-22352.md)
  `CVE-2024-22352` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 5 Mar 2024 · Tags: Information disclosure
- [IBM InfoSphere Information Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-50303.md)
  `CVE-2023-50303` · CVE record: IBM InfoSphere Information Server · CVSS 6.1 Medium · Not analysed yet · Published 28 Feb 2024 · Tags: Cross-site scripting (XSS)

Older: <https://agentprime.io/advisories/technology/ibm-infosphere-information-server.md?cursor=WyIyMDI0LTAyLTI4VDAwOjEwOjIyLjI2MjAwMFoiLCJDVkUtMjAyMy01MDMwMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-infosphere-information-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-infosphere-information-server/>. Everything for agents: <https://agentprime.io/llms.txt>.