Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-40747 EUVD-2022-44015GHSA-gg2j-6q4v-8gcf

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote a…

Published Nov 3, 2022 · Updated May 5, 2025 · Assigned by ibm

Description

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."

Affected products

VendorProductAffectedFixed
— IBM InfoSphere Information Server 11.7 —

Advisories 1

References