Skip to content
OpenAdvisories
High · 7.1 CVE-2025-12531 EUVD-2025-37511GHSA-7ggc-24wf-8f5x

IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability

Published Nov 3, 2025 · Updated Nov 3, 2025 · Assigned by ibm

Vendor: IBM Product: InfoSphere Information Server

Description

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products

VendorProductAffectedFixed
IBM InfoSphere Information Server 11.7.0.0 – ≤ 11.7.1.6 —

Advisories 1

References