CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-1138 – IBM Information Server information disclosure
https://notcve.org/view.php?id=CVE-2025-1138
15 May 2025 — IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing. • https://www.ibm.com/support/pages/node/7230295 • CWE-548: Exposure of Information Through Directory Listing •
CVSS: 3.7EPSS: 0%CPEs: 1EXPL: 0CVE-2025-25046 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2025-25046
23 Apr 2025 — IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques. IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques. • https://www.ibm.com/support/pages/node/7231333 • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-25045 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2025-25045
23 Apr 2025 — IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system. • https://www.ibm.com/support/pages/node/7231332 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22351 – IBM InfoSphere Information Server session fixation
https://notcve.org/view.php?id=CVE-2024-22351
23 Apr 2025 — IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. • https://www.ibm.com/support/pages/node/7229921 • CWE-613: Insufficient Session Expiration •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-55895 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-55895
29 Mar 2025 — IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. • https://www.ibm.com/support/pages/node/7185450 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-51477 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-51477
28 Mar 2025 — IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an observable response discrepancy. • https://www.ibm.com/support/pages/node/7185058 • CWE-203: Observable Discrepancy •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2024-7577 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-7577
28 Mar 2025 — IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product. • https://www.ibm.com/support/pages/node/7185020 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-43186 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-43186
28 Mar 2025 — IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions. • https://www.ibm.com/support/pages/node/7184980 • CWE-256: Plaintext Storage of a Password •
CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-51459 – IBM InfoSphere Server Information command execution
https://notcve.org/view.php?id=CVE-2024-51459
19 Mar 2025 — IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper handling of permissions. • https://www.ibm.com/support/pages/node/7185056 • CWE-280: Improper Handling of Insufficient Permissions or Privileges •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-40706 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-40706
24 Jan 2025 — IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system. • https://www.ibm.com/support/pages/node/7169826 • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere •