What is the CVSS score of CVE-2025-0966?

CVE-2025-0966 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Infosphere Information Server are affected by CVE-2025-0966?

IBM InfoSphere Information Server 11.7 installations are vulnerable to SQL injection attacks that could allow unauthorized access, modification, or deletion of database contents.

How to fix or mitigate CVE-2025-0966?

Within 24 hours: Inventory all InfoSphere Information Server 11.7 instances and restrict network access to authorized users only. Within 7 days: Implement network segmentation to isolate affected systems and deploy WAF rules to block SQL injection patterns targeting this application. Within 30 days: Monitor vendor security advisories for patch availability and establish an expedited patching schedule; consider migration planning if InfoSphere 11.7 is end-of-life.

Infosphere Information Server CVE-2025-0966

EUVD-2025-19079 HIGH

SQL Injection (CWE-89)

2025-06-25 psirt@us.ibm.com

IBM SQLi Information Disclosure Infosphere Information Server

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:19 euvd

EUVD-2025-19079

Analysis Generated

Mar 15, 2026 - 23:19 vuln.today

CVE Published

Jun 25, 2025 - 03:15 nvd

HIGH 7.6

DescriptionCVE.org

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

AnalysisAI

CVE-2025-0966 is a SQL injection vulnerability in IBM InfoSphere Information Server 11.7 that allows authenticated remote attackers to execute arbitrary SQL commands against the backend database. An attacker with valid credentials can view, add, modify, or delete sensitive information without administrative privileges. The vulnerability carries a CVSS score of 7.6 (High) and requires low attack complexity, making it a significant risk for organizations using affected versions.

Technical ContextAI

This vulnerability stems from CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), a classic SQL injection flaw where user-controlled input is concatenated into SQL queries without proper parameterization or input validation. IBM InfoSphere Information Server 11.7 fails to sanitize crafted SQL statements before passing them to the backend database engine. The affected component likely resides in the application's data query interface, request handler, or reporting module that constructs dynamic SQL queries. Without prepared statements or parameterized queries, attackers can manipulate query logic by injecting SQL metacharacters and commands.

RemediationAI

Immediate actions: (1) Apply IBM security patches for InfoSphere Information Server 11.7 when released—check IBM Security Advisories (https://www.ibm.com/support/pages/security-bulletins) for the specific fix version; (2) If patches are unavailable, restrict network access to InfoSphere services using firewall rules, limiting connections to trusted IP ranges; (3) Implement strict input validation and output encoding at the application layer; (4) Migrate to patched versions (likely 11.7.1+ or newer stable release); (5) Apply principle of least privilege to database service accounts used by InfoSphere; (6) Monitor database query logs for suspicious SQL patterns (e.g., UNION, stacked queries, comments). Long-term: upgrade to current InfoSphere versions with security hardening.