CVE-2012-0705

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-31 · updated 2026-06-16
Weakness: CWE-20

Description

InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not validate unspecified input data, which allows remote authenticated users to execute arbitrary commands via unknown vectors.

Affected products

IBM InfoSphere Information Server: 8.1, 8.5, 8.5.0.1, 8.5.0.2, 8.7, 9.1
IBM Infosphere Information Server Metabrokers & Bridges: all versions

References

http://www-01.ibm.com/support/docview.wss?uid=swg21623501
https://exchange.xforce.ibmcloud.com/vulnerabilities/73292
http://www-01.ibm.com/support/docview.wss?uid=swg21623501
https://exchange.xforce.ibmcloud.com/vulnerabilities/73292

Get alerted when CVE-2012-0705 or the next vulnerability affects your stack