Infosphere Information Server
CVE-2025-12832
MEDIUM
Severity by source
AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Lifecycle Timeline
2DescriptionCVE.org
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Analysis
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Technical ContextAI
Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).
RemediationAI
Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.
IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper handl
CVE-2025-0966 is a SQL injection vulnerability in IBM InfoSphere Information Server 11.7 that allows authenticated remot
IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 contain a denial of service vulnerability caused by
Infosphere Information Server versions up to 11.7.1.6 is affected by improper restriction of xml external entity referen
IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext paramete
IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored
IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in
IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation
IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an o
IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical erro
CVE-2025-3629 is a security vulnerability (CVSS 4.3) that allows an authenticated user. Remediation should follow standa
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today