What’s Vulnerable › Products

IBM InfoSphere Information Server vulnerabilities

189 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 41 published in the last 12 months.

Check whether your IBM InfoSphere Information Server version is affected

Latest IBM InfoSphere Information Server vulnerabilities

• CVE-2026-9836 — IBM DataStage Flow Designer application is affected by an information disclosure vulnerability (CVSS 7.5)
• CVE-2026-2485 — IBM InfoSphere Information Server Cross-Site Scripting (CVSS 4.8)
• CVE-2026-2484 — IBM InfoSphere Information Server Information Disclosure (CVSS 4.3)
• CVE-2026-2483 — IBM InfoSphere Information Server Cross-Site Scripting (CVSS 5.4)
• CVE-2026-1262 — IBM InfoSphere Information Server Information Disclosure (CVSS 4.3)
• CVE-2026-1015 — IBM InfoSphere Information Server is vulnerable to server-side request forgery (CVSS 5.4)
• CVE-2026-1014 — IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVSS 6.5)
• CVE-2025-36422 — IBM InfoSphere Information Server is vulnerable to cross-site request forgery (CVSS 4.3)
• CVE-2025-36258 — IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password (CVSS 5.5)
• CVE-2025-14974 — IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference (CVSS 7.5)
• CVE-2025-14912 — IBM InfoSphere Information Server is vulnerable to server-side request forgery (CVSS 5.4)
• CVE-2025-14810 — IBM InfoSphere Information Server is vulnerable due to insufficient session expiration (CVSS 6.5)
• CVE-2025-14808 — IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVSS 3.1)
• CVE-2025-14807 — IBM InfoSphere Information Server is vulnerable to HTTP header injection (CVSS 6.5)
• CVE-2025-14790 — IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information (CVSS 6.5)
• CVE-2026-1567 — IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability (CVSS 7.5)
• CVE-2026-1265 — IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file (CVSS 5.3)
• CVE-2025-12832 — IBM InfoSphere Information Server Server-Side Request Forgery (CVSS 4.3)
• CVE-2025-12531 — IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability (CVSS 9.1)
• CVE-2025-33003 — IBM InfoSphere Information Server is vulnerable to privilege escalation (CVSS 7.8)
• CVE-2025-36245 — IBM InfoSphere Information Server command execution (CVSS 8.8)
• CVE-2025-36034 — IBM InfoSphere DataStage Flow Designer information disclosure (CVSS 5.9)
• CVE-2025-0966 — IBM InfoSphere Information Server SQL injection (CVSS 7.6)
• CVE-2025-3629 — IBM InfoSphere Information Server file manipulation (CVSS 4.3)
• CVE-2025-3221 — IBM InfoSphere Information Server denial of service (CVSS 7.5)