Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.7:*:*:*:*:*:*:*

part: a version: 11.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Information Server On Cloud (f5d6166a-0f35-564b-9757-4910b3674e93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1499 vulnerable 2026-06-08 07:08:37.122698 IBM InfoSphere Information Server information disclosure
MEDIUM (6.5)
IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user.
Published: 2025-06-01T11:30:58.760Z
Updated: 2025-08-26T14:54:42.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1138 vulnerable 2026-06-08 07:06:37.023765 IBM Information Server information disclosure
MEDIUM (4.3)
IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.
Published: 2025-05-15T20:11:03.814Z
Updated: 2025-08-28T14:12:02.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40689 vulnerable 2026-06-08 06:43:52.998632 IBM InfoSphere Information Server SQL injection
MEDIUM (6)
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.
Published: 2024-07-26T13:27:26.097Z
Updated: 2024-08-02T04:33:11.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40752 vulnerable 2026-06-08 05:48:28.075599 Details available
CRITICAL (9.8)
IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687.
Published: 2022-11-16T00:00:00.000Z
Updated: 2025-07-23T20:45:00.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22454 vulnerable 2026-06-08 05:40:53.768011 Details available
MEDIUM (5.9)
IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Published: 2022-05-10T15:45:20.362Z
Updated: 2024-09-16T22:20:21.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22442 vulnerable 2026-06-08 05:40:53.756907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4384 vulnerable 2026-06-08 05:25:59.250061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4298 vulnerable 2026-06-08 05:25:59.107998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4286 vulnerable 2026-06-08 05:25:59.103203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4257 vulnerable 2026-06-08 05:13:57.011180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4238 vulnerable 2026-06-08 05:13:56.983640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4237 vulnerable 2026-06-08 05:13:56.983078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1994 vulnerable 2026-06-08 05:11:26.493689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1917 vulnerable 2026-06-08 05:11:26.381642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1906 vulnerable 2026-06-08 05:11:26.376156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1899 vulnerable 2026-06-08 05:11:26.367681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1895 vulnerable 2026-06-08 05:11:26.361334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1875 vulnerable 2026-06-08 05:11:26.329582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1845 vulnerable 2026-06-08 05:11:26.288021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1701 vulnerable 2026-06-08 05:11:18.610003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1518 vulnerable 2026-06-08 05:11:18.346664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.