Advisories · Technology

IBM InfoSphere Information Server.

Every CVE that names IBM InfoSphere Information Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9836 CVE record

CVSS 3.5 Low

IBM DataStage Flow Designer application is affected by an information disclosure vulnerability
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 30 Jun 2026
CVE-2025-14807 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server is vulnerable to HTTP header injection
- IBM InfoSphere Information Server
- CWE-644
Not analysed yet 25 Mar 2026
CVE-2026-1015 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server is vulnerable to server-side request forgery
- IBM InfoSphere Information Server
- Server-side request forgery (SSRF)
Not analysed yet 25 Mar 2026
CVE-2026-1014 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
- IBM InfoSphere Information Server
- Weak cryptography or TLS
Not analysed yet 25 Mar 2026
CVE-2026-2483 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server Cross-Site Scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2026-2484 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server Information Disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2025-36422 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server is vulnerable to cross-site request forgery
- IBM InfoSphere Information Server
- Cross-site request forgery (CSRF)
Not analysed yet 25 Mar 2026
CVE-2025-36258 CVE record

CVSS 7.1 High

IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password
- IBM InfoSphere Information Server
- CWE-256
Not analysed yet 25 Mar 2026
CVE-2026-2485 CVE record

CVSS 4.8 Medium

IBM InfoSphere Information Server Cross-Site Scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2025-14974 CVE record

CVSS 5.7 Medium

IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference
- IBM InfoSphere Information Server
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-1262 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server Information Disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2025-14912 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server is vulnerable to server-side request forgery
- IBM InfoSphere Information Server
- Server-side request forgery (SSRF)
Not analysed yet 25 Mar 2026
CVE-2025-14810 CVE record

CVSS 6.3 Medium

IBM InfoSphere Information Server is vulnerable due to insufficient session expiration
- IBM InfoSphere Information Server
- Authentication bypass
Not analysed yet 25 Mar 2026
CVE-2025-14808 CVE record

CVSS 3.1 Low

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
- IBM InfoSphere Information Server
- CWE-598
Not analysed yet 25 Mar 2026
CVE-2025-14790 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information
- IBM InfoSphere Information Server
- Hard-coded credentials
Not analysed yet 25 Mar 2026
CVE-2026-1567 CVE record

CVSS 7.1 High

IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
- IBM InfoSphere Information Server
- XML external entities (XXE)
Not analysed yet 3 Mar 2026
CVE-2026-1265 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 3 Mar 2026
CVE-2025-12832 CVE record

CVSS 4.6 Medium

IBM InfoSphere Information Server Server-Side Request Forgery
- IBM InfoSphere Information Server
- Server-side request forgery (SSRF)
Not analysed yet 8 Dec 2025
CVE-2025-12531 CVE record

CVSS 7.1 High

IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
- IBM InfoSphere Information Server
- XML external entities (XXE)
Not analysed yet 3 Nov 2025
CVE-2025-33003 CVE record

CVSS 7.8 High

IBM InfoSphere Information Server is vulnerable to privilege escalation
- IBM InfoSphere Information Server
- Privilege escalation
Not analysed yet 31 Oct 2025
CVE-2025-36245 CVE record

CVSS 8.8 High

IBM InfoSphere Information Server command execution
- IBM InfoSphere Information Server
- Command injection
Not analysed yet 29 Sept 2025
CVE-2025-36034 CVE record

CVSS 5.3 Medium

IBM InfoSphere DataStage Flow Designer information disclosure
- IBM InfoSphere Information Server
- Weak cryptography or TLS
Not analysed yet 26 Jun 2025
CVE-2025-0966 CVE record

CVSS 7.6 High

IBM InfoSphere Information Server SQL injection
- IBM InfoSphere Information Server
- SQL injection
Not analysed yet 25 Jun 2025
CVE-2025-3629 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server file manipulation
- IBM InfoSphere Information Server
- CWE-282
Not analysed yet 21 Jun 2025
CVE-2025-3221 CVE record

CVSS 7.5 High

IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- Denial of service
Not analysed yet 21 Jun 2025
CVE-2025-1499 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 1 Jun 2025
CVE-2025-1138 CVE record

CVSS 4.3 Medium

IBM Information Server information disclosure
- IBM InfoSphere Information Server
- CWE-548
Not analysed yet 15 May 2025
CVE-2025-25046 CVE record

CVSS 3.7 Low

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Weak cryptography or TLS
Not analysed yet 23 Apr 2025
CVE-2025-25045 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 23 Apr 2025
CVE-2024-22351 CVE record

CVSS 6.3 Medium

IBM InfoSphere Information Server session fixation
- IBM InfoSphere Information Server
- Authentication bypass
Not analysed yet 23 Apr 2025
CVE-2024-55895 CVE record

CVSS 2.7 Low

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 29 Mar 2025
CVE-2024-51477 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 28 Mar 2025
CVE-2024-7577 CVE record

CVSS 4.4 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 28 Mar 2025
CVE-2024-43186 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- CWE-256
Not analysed yet 28 Mar 2025
CVE-2024-51459 CVE record

CVSS 8.4 High

IBM InfoSphere Server Information command execution
- IBM InfoSphere Information Server
- CWE-280
Not analysed yet 19 Mar 2025
CVE-2024-40706 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 24 Jan 2025
CVE-2024-52363 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server directory traversal
- IBM InfoSphere Information Server
- Path traversal
Not analysed yet 17 Jan 2025
CVE-2021-29827 CVE record

CVSS 5.2 Medium

IBM InfoSphere Information Server clickjacking
- IBM InfoSphere Information Server
- CWE-1021
Not analysed yet 18 Dec 2024
CVE-2024-52901 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- CWE-1284
Not analysed yet 12 Dec 2024
CVE-2024-51460 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2023-23472 CVE record

CVSS 3.1 Low

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2024-40705 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- CWE-405
Not analysed yet 15 Aug 2024
CVE-2024-40704 CVE record

CVSS 4.9 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Hard-coded credentials
Not analysed yet 15 Aug 2024
CVE-2024-39751 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 6 Aug 2024
CVE-2024-40689 CVE record

CVSS 6.0 Medium

IBM InfoSphere Information Server SQL injection
- IBM InfoSphere Information Server
- SQL injection
Not analysed yet 26 Jul 2024
CVE-2024-37533 CVE record

CVSS 2.4 Low

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 24 Jul 2024
CVE-2023-50964 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2024
CVE-2024-28794 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2024
CVE-2023-50953 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 30 Jun 2024
CVE-2023-50952 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server server-side request forgery
- IBM InfoSphere Information Server
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2024
CVE-2024-28797 CVE record

CVSS 6.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2024
CVE-2024-31898 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server data modification
- IBM InfoSphere Information Server
- Broken access control
Not analysed yet 30 Jun 2024
CVE-2023-50954 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- CWE-598
Not analysed yet 30 Jun 2024
CVE-2024-31902 CVE record

CVSS 4.3 Medium

IBM InfoSphere Information Server cross-site request forgery
- IBM InfoSphere Information Server
- Cross-site request forgery (CSRF)
Not analysed yet 30 Jun 2024
CVE-2024-35119 CVE record

CVSS 5.3 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 30 Jun 2024
CVE-2024-28798 CVE record

CVSS 7.2 High

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2024
CVE-2023-35022 CVE record

CVSS 3.3 Low

IBM InfoSphere Information Server improper authentication
- IBM InfoSphere Information Server
- Broken access control
Not analysed yet 30 Jun 2024
CVE-2024-28795 CVE record

CVSS 5.4 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2024
CVE-2024-22352 CVE record

CVSS 6.5 Medium

IBM InfoSphere Information Server information disclosure
- IBM InfoSphere Information Server
- Information disclosure
Not analysed yet 5 Mar 2024
CVE-2023-50303 CVE record

CVSS 6.1 Medium

IBM InfoSphere Information Server cross-site scripting
- IBM InfoSphere Information Server
- Cross-site scripting (XSS)
Not analysed yet 28 Feb 2024