What is the CVSS score of CVE-2025-3221?

CVE-2025-3221 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Infosphere Information Server are affected by CVE-2025-3221?

IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are vulnerable to denial of service attacks, potentially disrupting data integration and ETL operations critical to business…

How to fix or mitigate CVE-2025-3221?

Within 24 hours: Inventory all InfoSphere Information Server deployments and identify systems running versions 11.7.0.0-11.7.1.6; implement network-level rate limiting on affected systems. Within 7 days: Deploy WAF rules to reject malformed requests targeting InfoSphere endpoints; isolate affected systems to restricted network segments if operationally feasible. Within 30 days: Monitor vendor communications for patch availability; establish upgrade testing plan for deployment upon patch release.

Infosphere Information Server CVE-2025-3221

EUVD-2025-18811 HIGH

Allocation of Resources Without Limits or Throttling (CWE-770)

2025-06-21 psirt@us.ibm.com

Denial Of Service IBM Infosphere Information Server

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 21:35 euvd

EUVD-2025-18811

Analysis Generated

Mar 15, 2026 - 21:35 vuln.today

CVE Published

Jun 21, 2025 - 13:15 nvd

HIGH 7.5

DescriptionCVE.org

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

AnalysisAI

IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 contain a denial of service vulnerability caused by insufficient validation of incoming request resources (CWE-770: Allocation of Resources Without Limits or Throttling). A remote, unauthenticated attacker can exploit this over the network to exhaust server resources and cause service unavailability. The CVSS 7.5 score reflects high availability impact with no authentication required and low attack complexity.

Technical ContextAI

The vulnerability resides in IBM InfoSphere Information Server's request handling mechanism, which fails to properly validate and limit resource allocation for incoming requests. CWE-770 (Allocation of Resources Without Limits or Throttling) indicates the root cause: the application allocates resources (memory, CPU, connections, or processing capacity) in response to user-controlled input without enforcing limits or rate throttling. This is a classic resource exhaustion attack vector in enterprise data integration platforms. The affected product is IBM InfoSphere Information Server, a data integration and governance tool that processes ETL workflows and metadata. The vulnerable component likely resides in the web services layer, API handler, or request dispatcher that fails to implement proper request validation, rate limiting, or resource quotas before processing begins.

RemediationAI

Upgrade IBM InfoSphere Information Server to version 11.7.1.7 or later (patch version to be confirmed in IBM security bulletin).; priority: Immediate Workaround (Temporary): Implement network-level rate limiting and request throttling using a reverse proxy (e.g., NGINX, Apache) or Web Application Firewall (WAF) in front of InfoSphere servers to limit incoming request rates and resource consumption per source IP.; priority: High Workaround (Temporary): Restrict network access to InfoSphere Information Server to trusted internal networks only; disable external/internet-facing access until patched.; priority: High Monitoring: Monitor InfoSphere server resource utilization (CPU, memory, connection count) for anomalous spikes; alert on sustained high resource consumption from single or distributed sources.; priority: Medium Vendor Advisory: Consult IBM's security advisory and fix pack release notes for detailed patch deployment steps and any compatibility considerations.; link: https://www.ibm.com/support/pages/security-bulletin-infosphere-information-server-remote-denial-service-vulnerability